Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• criticalCVE-2026-75513

  CVE-2026-75513: Marten LINQ Provider SQL Injection via Unescaped Dictionary Key

  Marten's LINQ query engine interpolates attacker-controlled strings directly into PostgreSQL SQL as unescaped single-quoted literals, letting anyone who can influence a dictionary filter key bypass…

• highCVE-2026-75516

  CVE-2026-75516: RabbitMQ Java Client Frame-Level OOM via Math.min with Unlimited Frame Size

  A malicious or man-in-the-middle AMQP server can crash any RabbitMQ Java client by sending a frame-max value of zero during handshake, silently disabling the 64 MB inbound allocation cap and allowing…

• highCVE-2026-63126

  CVE-2026-63126: wire-runtime 32-bit Integer Overflow in ByteArrayProtoReader32

  Sending a six-byte protobuf message with a max-int length field to any Wire-decoded endpoint crashes the service with an unchecked Java exception instead of a normal decode error, enabling…

• highCVE-2026-82410

  CVE-2026-82410: PocketBase Unhandled Panic in Worker Goroutines

  A panic inside any of PocketBase's internal background worker goroutines bypasses the HTTP recover middleware and crashes the entire server process, allowing an unauthenticated attacker to cause a…

• highCVE-2026-63506

  CVE-2026-63506: @tinacms/auth Cross-Tenant Authorization Bypass

  A flaw in TinaCMS lets anyone with a free TinaCloud account impersonate an authorized user on a completely unrelated self-hosted site by supplying their own app ID and token in the request.

• highCVE-2026-63127

  CVE-2026-63127: rmcp OAuth Protected Resource Metadata Spoofing

  The rmcp Rust SDK skips a required RFC 9728 check when discovering OAuth servers, letting a malicious MCP server trick clients into fetching real access tokens and handing them over to an attacker.

• highCVE-2026-63128

  CVE-2026-63128: rmcp Streamable HTTP Unauthenticated Session-Table Memory Leak

  Any unauthenticated caller can permanently leak server memory one entry at a time by sending a non-initialize JSON-RPC POST to an rmcp Streamable HTTP server, eventually exhausting RAM and crashing…

• highCVE-2026-63671

  CVE-2026-63671: @nuxtjs/mdc SVG xlink:href and iframe data:text/html XSS

  A flaw in the @nuxtjs/mdc URL sanitizer lets an attacker embed JavaScript in SVG links and data-URI iframes inside untrusted Markdown, executing scripts in the page's origin with no special…

• highCVE-2026-61592

  CVE-2026-61592: djust SSE Session Hijack via Client-Controlled session_id

  In djust before 1.0.7, anyone who knows a victim's SSE session_id can connect to that session and fire server-side event handlers as the victim, because the server never checks that the connecting…

• highCVE-2026-61591

  CVE-2026-61591: djust Unsigned State Snapshot Privilege Escalation

  djust let any authenticated user edit the state blob embedded in their own page and send it back on reconnect, letting them flip fields like is_admin or alter balances with no signature check.

• highCVE-2026-68904

  CVE-2026-68904: node-opcua-transport TCP Socket Leak via Keepalive Reconnection Loop

  A bug in node-opcua causes TCP sockets to pile up indefinitely in FIN-WAIT-2 state during automatic reconnection, eventually exhausting file descriptors and crashing the process.

• highCVE-2026-61595

  CVE-2026-61595: djust Multi-Tenant Isolation Fails Open on WebSocket/SSE Path

  Any authenticated user who opens a WebSocket or SSE connection to a djust LiveView receives unfiltered database rows from every tenant, because the tenant context was never set on the live transport…