Trending now

CVE-2026-44825 is a hardcoded credentials vulnerability found in the Apache Solr Basic Authentication setup tool, specifically when using the `bin/solr auth enable` command. This tool, intended for configuring BasicAuth, inadvertently creates undocumented template user accounts such as `superadmin`, `admin`, `search`, and `index` with publicly known default credentials (often where the username and password are the same). This flaw allows a remote attacker to leverage these silently installed, default credentials to gain full administrative access to the affected SolrCloud cluster. The vulnerability impacts Apache Solr versions 9.4.0 through 9.10.1 and version 10.0.0, but only in deployments where Basic Authentication was configured using the aforementioned command.

CVE-2026-10585 is a stored cross-site scripting (XSS) vulnerability found in GitHub Enterprise Server. An authenticated attacker can exploit this by embedding a specially crafted payload within the title of a Discussion in the Q&A category. When another authenticated user views this Discussion, the malicious JavaScript is executed in their browser. The vulnerability arises because the `AnsweredQuestionStructuredDataComponent` fails to properly escape user-controlled Discussion titles before embedding them into a `<script type="application/ld+json">` block. This allows the attacker to break out of the JSON-LD block and inject arbitrary markup. Furthermore, attackers can escalate this injection to a full XSS attack by leveraging JSONP callback support in the REST API to bypass the Content Security Policy (CSP) of GitHub Enterprise Server.

CVE-2026-9132 is an authorization bypass vulnerability found in GitHub Enterprise Server. The flaw specifically resides within the Copilot pull request description diff summary endpoint. This endpoint was designed to accept cross-repository comparison ranges and render the resulting diffs without adequately verifying if the requesting user had authorization to view the target repository. This oversight allowed an authenticated user, who possessed read access to at least one repository on the instance, to exploit the endpoint. By doing so, they could read source code from private repositories to which they otherwise did not have access. The vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was addressed in versions 3.17.17, 3.18.11, 3.19.8, and 3.20.4.

CVE-2026-39999 describes an Authentication Bypass by Spoofing vulnerability found in Apache APISIX. This flaw allows an attacker to completely bypass authentication by exploiting specific configurations of the `jwt-auth` plugin. The vulnerability is characterized as a JWT algorithm confusion bug within the `jwt-auth` plugin. The issue impacts Apache APISIX versions from v2.2 through v3.16.0. To remediate this vulnerability, users are advised to upgrade to version v3.17.0 or later, which includes a fix for the problem.

CVE-2026-44963 is a remote code execution (RCE) vulnerability identified in Veeam Backup Server, specifically impacting Veeam Backup & Replication. This flaw, categorized as a deserialization of untrusted data (CWE-502), allows an authenticated domain user to execute arbitrary code on the affected backup server. The vulnerability requires low privileges, meaning an attacker only needs an authenticated domain account to exploit it. Successful exploitation can lead to the execution of arbitrary code under the privileges of the backup service, potentially affecting the confidentiality, integrity, and availability of the system and connected components. Veeam has released a security advisory and patches to address this issue.

CVE-2026-59999 describes a vulnerability found in OpenSSH versions prior to 10.4. The flaw exists within the `sshd` component, where the configuration setting `DisableForwarding=yes` was intended to take precedence over `PermitTunnel=yes`, but failed to do so. This oversight means that even when `DisableForwarding` was enabled to prevent SSH tunneling, the presence of `PermitTunnel=yes` could still allow for the establishment of tunnels. This misconfiguration could lead to unauthorized use of SSH tunneling capabilities, potentially enabling an attacker to bypass network restrictions or perform actions that should have been prohibited. The vulnerability is categorized under CWE-348, which refers to the use of a less trusted source in decision-making logic.

CVE-2026-59996 is a vulnerability found in the `scp` utility within OpenSSH, affecting versions prior to 10.4. This flaw allows for a file to be inadvertently placed in the parent directory of the intended destination when a copy operation occurs between two remote locations. The vulnerability is related to how `scp` handles directory paths during remote-to-remote file transfers, potentially leading to files being written outside of their expected location..

CVE-2026-48282 is identified as a path traversal vulnerability affecting Adobe ColdFusion versions 2025.9, 2023.20, and earlier releases. This flaw, categorized as an Improper Limitation of a Pathname to a Restricted Directory (CWE-22), allows an attacker to execute arbitrary code in the context of the current user. Exploitation of CVE-2026-48282 does not require user interaction or any specific privileges, making it accessible over a network by sending crafted HTTP requests to a ColdFusion endpoint. Attackers can manipulate file system paths using traversal sequences to access or write files outside of the intended restricted directory, which can then be chained to achieve arbitrary code execution. This vulnerability has been observed under active exploitation shortly after its public disclosure.

CVE-2024-30326 is identified as a Doc Object Use-After-Free Remote Code Execution vulnerability affecting Foxit PDF Reader. This flaw allows remote attackers to execute arbitrary code on vulnerable installations of the software. Exploitation of this vulnerability requires user interaction, typically by the target opening a malicious file or visiting a specially crafted web page. The underlying issue is a failure in Foxit PDF Reader to validate the existence of an object before performing operations on it, which an attacker can leverage to execute code within the context of the current process. Foxit addressed this vulnerability as part of its April 2024 security updates.