Labs
Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.
- highCVE-2026-68519
CVE-2026-68519: Glances --disable-config-exec Bypass via On-Alert Action OS Command Injection
Running Glances with --disable-config-exec does not protect against shell operators in alert action commands, so a malicious config file can still write files or chain commands when a monitoring…
- highCVE-2026-71491
CVE-2026-71491: sqlparse Quadratic DoS in group_comments
Sending a large block of single-line SQL comments to sqlparse causes the parser to hang for minutes, because the comment-grouping function scans all remaining tokens on every loop iteration instead…
- criticalCVE-2026-64859
CVE-2026-64859: new-api User List API Leaks Root Access Token
Any admin user of new-api (before v1.0.0-rc.7) could call the user management API and receive the root user's access token in plain text, allowing full privilege escalation to root.
- highCVE-2026-64868
CVE-2026-64868: new-api Unauthenticated Webhook DoS via Unbounded Body Read
Unauthenticated attackers could crash or destabilize a new-api instance by sending oversized HTTP requests to payment webhook endpoints, because the server read and logged the full request body…
- criticalCVE-2026-71479
CVE-2026-71479: new-api Integer Overflow in Quota Billing Yields Negative Charges
A crafted image-generation request with a near-maxint quantity value causes new-api's billing math to wrap into a large negative number at settlement, crediting the attacker's balance instead of…
- highCVE-2026-68518
CVE-2026-68518: glances Action-Template Sanitizer Bypass via Cross-Field Shell-Operator Reconstruction
A local unprivileged user can run arbitrary commands as the Glances process owner by naming a process so that a single ampersand at the end of one Mustache template variable and a single ampersand at…
- criticalCVE-2026-55158
CVE-2026-55158: conflibot OS Command Injection via Pull Request Branch Name
A GitHub Actions bot that checks for PR conflicts builds shell commands by dropping the untrusted PR branch name directly into a string, letting any fork author run arbitrary commands on the runner…
- highCVE-2026-53728
CVE-2026-53728: @medplum/core Open Redirect via Prefix-Matched Redirect URI in External Auth Callback
A flaw in how Medplum validates redirect URIs during external identity provider login lets an attacker forge the OAuth state, redirect authorization codes to their own server, and take over any…
- highCVE-2026-55157
CVE-2026-55157: @ooples/token-optimizer-mcp OS Command Injection via smart_user username
A crafted username passed to the smart_user tool's get-user-info operation is interpolated directly into a shell command, letting any MCP client run arbitrary OS commands as the server's process…
- highCVE-2026-35219
CVE-2026-35219: Budibase Server SSRF via Automation Steps Bypassing IP Blacklist
Budibase automation steps (Outgoing Webhook, Zapier, n8n, Slack, Discord, Make.com) call node-fetch directly without any IP blacklist check, letting any authenticated user reach cloud metadata…
- highCVE-2026-55153
CVE-2026-55153: mchange-commons-java Unsafe Reflection via JavaBeanObjectFactory
mchange-commons-java's JavaBeanObjectFactory will instantiate any class named in a JNDI Reference and set arbitrary JavaBean properties on it, letting an attacker trigger SSRF, deserialization gadget…
- highCVE-2026-53653
CVE-2026-53653: Grav Unauthenticated DoS via Unbounded Image Resize Dimensions
Any anonymous visitor can crash a Grav server by requesting an image resized to extreme dimensions, which forces the server to allocate gigabytes of memory outside PHP's memory limit.