Labs
Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.
- highCVE-2026-59965
CVE-2026-59965: @jhb.software/payload-alt-text-plugin Authorization Bypass via overrideAccess Omission
A missing overrideAccess: false flag in the plugin's Payload Local API calls lets any logged-in user read and overwrite alt text and keyword fields on upload documents that should be restricted to…
- criticalCVE-2026-88044
CVE-2026-88044: rclone RC Per-Server Auth-Proxy Bypass (FTP/S3)
When rclone's RC interface starts an FTP or S3 server with a per-request auth proxy, the server ignores it and falls back to anonymous access because the code checks a global config variable instead…
- highCVE-2026-88045
CVE-2026-88045: rclone serve s3 Multipart Memory Exhaustion via Declared Content-Length
rclone's S3 server allocates memory equal to whatever size a client declares in a multipart upload header, before reading a single byte of the body, letting any network client exhaust server memory…
- highCVE-2026-88017
CVE-2026-88017: rclone FTP Auth-Proxy Cross-Session Credential Overwrite
When rclone serves FTP with an auth-proxy, a second login using the same username but a different password silently overwrites the stored credential for all active sessions, letting an…
- high
mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS
The mistral.rs chat completions endpoint fetches any attacker-supplied image, audio, or video URL into server memory with no size limit, and extracts every frame of a video to disk, letting an…
- criticalCVE-2026-88062
CVE-2026-88062: omniroute Unauthenticated Remote Code Execution via Custom ACP Agent
A missing authentication guard and an exploitable command validation flaw in OmniRoute's custom agent registration endpoint let any anonymous attacker run arbitrary OS commands inside the server…
- highCVE-2026-87016
CVE-2026-87016: Open WebUI OAuth Subject Wildcard Authentication Bypass
On default SQLite deployments with OAuth or OIDC enabled, an attacker can sign in as any user, including an administrator, by supplying a wildcard character as the OAuth subject claim, because the…
- highCVE-2026-86083
CVE-2026-86083: n8n Expression Sandbox Escape via JSON.stringify Hijacking
An authenticated n8n user can overwrite the global JSON.stringify function inside a workflow expression, causing the legacy expression engine to generate and execute attacker-controlled JavaScript…
- highCVE-2026-88056
CVE-2026-88056: @angular/platform-server SSRF via Unicode Whitespace Trim Bypass
A leading no-break space in a URL fools Angular SSR's same-origin check, and a trim() call then strips it, turning a safe-looking path into a cross-origin request that leaks server-side credentials.
- highCVE-2026-88060
CVE-2026-88060: @angular/platform-server SSR XSS via Unescaped Template Content Across DocumentFragment Boundaries
Angular's server-side rendering serializer fails to escape closing tags like </noscript> when they appear inside a <template> element nested in a fallback container, letting an attacker break out of…
- highCVE-2026-55416
CVE-2026-55416: Pimcore Custom Reports SQL Injection via Report Configuration Fields
An authenticated Pimcore admin with report-configuration permission can inject arbitrary SQL through report fields that are concatenated directly into queries, exposing the entire database.
- highCVE-2026-59161
CVE-2026-59161: Excelize GetRows Streaming Row-Bound Bypass Leads to Attacker-Controlled Memory Allocation
A crafted XLSX file can set a row number far above Excel's legal limit in the streaming reader, causing GetRows to silently allocate millions of empty rows and exhaust server memory.