Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-48979

  CVE-2026-48979: php-standard-library/h2 HTTP/2 Request Smuggling via Missing Content-Length Validation

  A missing content-length check in the PHP Standard Library's HTTP/2 server lets a malicious client send a different number of bytes than it declared, bypassing size limits or corrupting application…

• high

  CVE-2026-56396: phpMyFAQ Privilege Escalation via Missing Authorization in editUser and updateUserRights

  A non-SuperAdmin administrator in phpMyFAQ can promote themselves to SuperAdmin or grant arbitrary permissions to any account, because two admin API endpoints never check whether the caller has the…

• high

  better-helperjs Path Traversal via String Prefix Bypass in Static Server

  The production static file server in better-helperjs lets attackers read files from adjacent directories on disk by exploiting a flawed string prefix check that mistakes a shared directory name…

• criticalCVE-2026-49252

  CVE-2026-49252: @deepstream/server Prototype Pollution via Record Path

  Any authenticated deepstream user with write access to a record can pollute the server's JavaScript prototype by sending a crafted path in a record update, potentially escalating their own…

• highCVE-2026-49291

  CVE-2026-49291: mcp-memory-service Missing Authorization on MCP tools/call

  A read-only OAuth token can write or delete memories through the MCP JSON-RPC endpoint, bypassing the write-scope checks that protect the equivalent REST API routes.

• criticalCVE-2026-49257

  CVE-2026-49257: mcp-pinot-server Unauthenticated Remote Tool Invocation

  The mcp-pinot MCP server binds to all network interfaces with authentication disabled by default, letting any remote caller read or modify a production Apache Pinot cluster without any credentials.

• criticalCVE-2026-48797

  CVE-2026-48797: backpropagate Authentication Bypass on UI Training Control Plane

  The backpropagate web UI ignores the --auth flag operators pass at startup, so anyone who can reach the bound port gets full, unauthenticated access to training controls, dataset uploads, and…

• high

  Hysteria: HTTP Sniff Unbounded Header Read Server DoS

  When protocol sniffing is enabled, a Hysteria 2 server will buffer an attacker's HTTP header data indefinitely until the sniff timeout, allowing any authenticated client to exhaust server memory and…

• high

  Hysteria Server Crash via Tiny QUIC max_datagram_frame_size

  An authenticated Hysteria client can crash the server instantly by advertising a tiny QUIC datagram size and then sending a UDP packet, triggering a slice-bounds panic in the fragmentation code.

• criticalCVE-2026-48769

  CVE-2026-48769: Incus Arbitrary File Write via Trusted Image Hash Header

  A malicious image server can trick the Incus daemon into writing attacker-controlled content to any file on the host, including cron jobs, by returning a path-traversal sequence in the HTTP…

• highCVE-2026-48788

  CVE-2026-48788: Remark42 Image Proxy XSS via Content-Type Spoofing

  Remark42's image proxy blindly trusts the Content-Type header from remote servers, so an attacker can serve HTML/JavaScript disguised as an image and have it executed in the browser under Remark42's…

• criticalCVE-2026-48753

  CVE-2026-48753: Incus S3 Multipart Upload Path Traversal to Arbitrary File Write

  A missing path sanitization check in Incus's built-in S3 server lets any authenticated bucket user write files anywhere on the host filesystem, including cron directories, making remote code…