Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-71307

  CVE-2026-71307: Lemur Authenticated Plaintext Destination Credential Exposure

  Any logged-in Lemur user, including read-only accounts, can call the destinations API and get back plaintext SFTP passwords and private-key passphrases that Lemur uses to deploy TLS certificates.

• highCVE-2026-71308

  CVE-2026-71308: Lemur Unauthorized Certificate Hijack via Unchecked replaces Field

  Any authenticated Lemur user can silently take over a production certificate they do not own by listing its ID in the replaces field when uploading or creating their own certificate, disabling the…

• highCVE-2026-71417

  CVE-2026-71417: Lemur Authorization Bypass via Duplicate Certificate Upload Enables Arbitrary CA Revocation

  Any authenticated Lemur user can revoke a certificate they do not own, including live production certificates, by uploading a duplicate database record and revoking it through an authorization check…

• highCVE-2026-55224

  CVE-2026-55224: MineAdmin Path Traversal in Plugin Install/Uninstall

  MineAdmin's app-store plugin service accepts unsanitized directory names from users and plugs them straight into file-system paths, letting any authenticated user read, install, or uninstall content…

• high

  MeshCentral Stored XSS via Unsanitized Agent Fields

  A rogue or compromised MeshAgent can inject arbitrary JavaScript into the MeshCentral admin dashboard by sending malicious HTML in its OS description field, potentially giving attackers full control…

• criticalCVE-2026-55107

  CVE-2026-55107: kobako Sandbox Escape via Unguarded public_send Dispatcher

  A guest mruby script running inside a kobako sandbox can call any Ruby method on the host process, including eval, by pivoting through the dispatcher's unguarded public_send call to reach Kernel…

• criticalCVE-2026-55211

  CVE-2026-55211: surfio Out-of-Bounds Read in IRAP Binary Parser

  A crafted IRAP surface file with inflated size fields can trick surfio into reading past the end of its allocated buffer, crashing or exposing process memory in any service that parses untrusted…

• criticalCVE-2026-54133

  CVE-2026-54133: jmespath.php CompilerRuntime Code Injection via Unescaped Function Names

  A flaw in jmespath.php's compiler runtime lets an attacker smuggle arbitrary PHP code into a cached file by crafting a JMESPath expression that uses a raw string or literal as a function name, which…

• high

  MONAI nnUNetV2Runner OS Command Injection via dataset_name_or_id

  MONAI's nnUNetV2Runner passes a YAML-supplied dataset name directly into a shell command without sanitization, letting an attacker run arbitrary OS commands by embedding shell metacharacters in a…

• high

  MONAI algo_from_pickle() Unsafe Pickle Deserialization RCE (Incomplete Fix)

  MONAI's algo_from_pickle() function loads attacker-supplied pickle files with no restrictions, letting anyone who can place a malicious .pkl file on the system run arbitrary code with the privileges…

• high

  MONAI NumpyReader Unsafe Deserialization via allow_pickle=True

  MONAI's NumpyReader hardcoded allow_pickle=True when loading .npy and .npz files, letting an attacker execute arbitrary code by embedding a malicious pickle payload in any medical imaging dataset…

• highCVE-2026-55178

  CVE-2026-55178: GeoLens Cross-Dataset Authorization Bypass

  Six endpoints in GeoLens checked access for the resource in the URL but never re-checked a second dataset they silently read through, letting anonymous callers dump private map metadata, vector…