Vulnerability intelligence

CVE-2024-1813 is a PHP Object Injection vulnerability found in the Simple Job Board plugin for WordPress, affecting all versions up to and including 2.11.0. This flaw stems from the unsafe deserialization of untrusted input within the `job_board_applicant_list_columns_value` function. The vulnerability allows unauthenticated attackers to inject a PHP Object. If a Property Oriented Programming (POP) chain is present on the target system through an additional plugin or theme, this could enable an attacker to delete arbitrary files, retrieve sensitive data, or execute code when a submitted job application is viewed.

CVE-2026-42533 is a heap buffer overflow vulnerability affecting NGINX Plus and NGINX Open Source. This flaw arises when the `map` directive utilizes regular expression matching, and a string expression references the map's regex capture variables prior to referencing the map output variable. The same outcome can also be achieved under specific conditions by employing a non-cacheable variable within a string expression. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests. This can lead to a heap buffer overflow in the NGINX worker process, which may result in a restart of the process. The vulnerability is described as a configuration-dependent worker-process memory corruption issue.

CVE-2026-9256, also known as "nginx-poolslip," is a heap buffer overflow vulnerability found within the `ngx_http_rewrite_module` component of NGINX Plus and NGINX Open Source. This flaw is triggered when a rewrite directive employs a regular expression pattern that contains distinct, yet overlapping, Perl-Compatible Regular Expression (PCRE) captures. The vulnerability manifests when a replacement string subsequently references multiple of these captures within a redirect or arguments context. Under these specific conditions, NGINX miscalculates the required length for the output after URI escaping, resulting in an out-of-bounds write within the worker process memory pool. An unauthenticated remote attacker can exploit this by sending specially crafted HTTP requests. The primary outcome of this exploitation is typically a denial-of-service condition, caused by repeated crashes of the NGINX worker process. On systems where Address Space Layout Randomization (ASLR) is disabled or can be bypassed, this vulnerability could potentially enable remote code execution within the worker process context.

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user.  Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.   Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.

CVE-2026-16812 is an OS command injection vulnerability found in Arista Networks VeloCloud Orchestrator (VCO) On-Prem. This flaw allows a remote attacker to execute operating system commands on the VCO host. The vulnerable functionality was originally intended for internal use only but remained remotely accessible. Successful exploitation of CVE-2026-16812 can lead to a compromise of the confidentiality, integrity, and availability of the orchestrator and the data it manages. This vulnerability does not require authentication for exploitation and has been actively exploited in the wild.

CVE-2025-68686 is an information disclosure vulnerability affecting multiple versions of Fortinet FortiOS, categorized as an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200). This flaw allows a remote, unauthenticated attacker to bypass a previously implemented patch designed to address a symbolic link persistency mechanism. The bypass is achieved through specially crafted HTTP requests, which can lead to the exposure of sensitive data. It is important to note that CVE-2025-68686 acts as a secondary exploitation vector. For this vulnerability to be leveraged, the FortiOS product must have already been compromised at the filesystem level through a separate, prior vulnerability. This means the vulnerability extends the impact of previous compromises by allowing attackers to maintain unauthorized access to sensitive information on already affected FortiOS devices.