Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-63445

  CVE-2026-63445: Perses Filesystem Path Traversal via Unvalidated Project Parameter

  Perses versions before 0.54.0-rc.0 let an attacker read arbitrary YAML/JSON files off the server by supplying directory-traversal sequences in the project query parameter on any list endpoint.

• criticalCVE-2026-63374

  CVE-2026-63374: anyio TLS Certificate Spoofing via IDNA 2003 Hostname Encoding

  AnyIO's TLS layer encodes international domain names using the outdated IDNA 2003 standard, letting an attacker present a legitimately issued certificate for the wrong hostname and pass certificate…

• highCVE-2026-63349

  CVE-2026-63349: anyio Incorrect Privilege Assignment in run_process / open_process

  AnyIO 4.14.0 and 4.14.1 silently ignore the extra_groups argument when spawning child processes, so callers cannot reliably drop supplementary POSIX groups from less-privileged subprocesses.

• highCVE-2026-77301

  CVE-2026-77301: adm-zip Uncontrolled Memory Allocation via Declared Uncompressed Size (DoS)

  A crafted ZIP file with a falsely inflated uncompressed-size header field forces adm-zip to allocate gigabytes of RAM before doing any validation, making it trivial to crash or OOM-kill any Node.js…

• highCVE-2026-91127

  CVE-2026-91127: @file-viewer/doc DOM XSS via Unsafe Hyperlink Scheme in Legacy DOC Renderer

  A crafted .doc file with a javascript: hyperlink can execute attacker-controlled script in the browser when a viewer clicks the rendered link, because the legacy DOC renderer passed hyperlink targets…

• high

  Semantic MediaWiki Missing Authorization in smwtask API Module

  Any anonymous visitor can call the Semantic MediaWiki smwtask API endpoint to read internal database statistics and trigger admin-only maintenance jobs, because the module never checks whether the…

• criticalCVE-2025-66455

  CVE-2025-66455: lmdeploy Remote Code Execution via Pickle Deserialization in DistServe ZMQ Connector

  An attacker who can reach an LMDeploy DistServe API server can trick it into connecting to a rogue ZeroMQ endpoint and deserializing a malicious pickle payload, resulting in arbitrary code execution…

• highCVE-2025-61682

  CVE-2025-61682: Semantic MediaWiki Stored XSS via data-subtab Attribute

  Any wiki editor can inject and execute arbitrary JavaScript in other users' browsers by embedding a crafted data attribute in wikitext, because Semantic MediaWiki writes that attribute value directly…

• highCVE-2026-77615

  CVE-2026-77615: Opencast Paella Player Stored XSS via Caption Cue Text

  A non-admin Opencast user can embed JavaScript in a WebVTT or DFXP subtitle file that runs in every viewer's browser the moment they turn captions on, including anonymous visitors.

• highCVE-2026-76839

  CVE-2026-76839: Grav CMS Twig Sandbox Credential Leak via offsetGet()

  A page editor in Grav CMS can call offsetGet() on a User object inside a sandboxed Twig template to read the bcrypt password hash and 2FA secrets directly, bypassing every redaction Grav applies…

• criticalCVE-2026-79752

  CVE-2026-79752: CakePHP FunctionsBuilder SQL Injection

  Several CakePHP query-builder helper methods write user-supplied strings directly into SQL as unquoted structural keywords, letting an attacker inject arbitrary SQL through the dataType, part, or…

• highCVE-2026-86049

  CVE-2026-86049: jupyter_server Token Leak via Referer Header in 500 Logs

  Jupyter Server logged the raw Referer header on every 500 error, so any token embedded in that URL ended up in plain text inside the server log file.