💥 NoteGen Shell Permissions Enable Full Remote Code Execution
NoteGen desktop users and managed-device administrators should upgrade to 0.32.0 or later urgently. The command-execution capability makes this especially dangerous when paired with any route for injecting JavaScript into the application.
CVE-2026-17497 affects NoteGen before 0.32.0 and carries a CVSS score of 8.3 HIGH. Its default Tauri desktop capabilities allow webview JavaScript to execute bash, python, and python3 commands with arbitrary arguments. When combined with script execution in the webview, such as chat XSS, an attacker can achieve full remote code execution with the privileges of the NoteGen process.
🔗 Read more 🔗
Source: NVD
🧨 Unsanitized AI Responses Expose NoteGen Users to XSS
Organizations using NoteGen should update to 0.32.0 or later as a high priority. Avoid opening untrusted skills or AI-generated chat content on older versions because successful exploitation can provide privileged application-level script execution.
CVE-2026-17496 affects NoteGen before 0.32.0 and has a CVSS score of 8.1 HIGH. AI chat responses are rendered with raw HTML enabled and inserted into the DOM without sanitization, while the content security policy is disabled. Attacker-controlled prompt content can therefore cause executable markup to run as JavaScript inside the privileged Tauri webview.
🔗 Read more 🔗
Source: NVD
🔓 WordPress Membership Flaw Lets Visitors Claim Elevated Roles
WordPress administrators running this membership plugin should upgrade to 4.16.18 or later promptly. Review recently created Editor and Author accounts, especially on sites that expose public registration.
CVE-2026-12497 affects the Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.16.18 and is rated CVSS 7.5 HIGH. Inconsistent parsing of permitted registration roles can cause the handler to accept roles that the public form was not configured to offer. An unauthenticated visitor may register as a higher-privileged non-administrator user, such as an Editor or Author.
🔗 Read more 🔗
Source: NVD
🚨 Critical SQL Injection Hits WordPress Issue-Tracking Plugin
Any internet-facing WordPress site using this plugin should upgrade to 5.1.0 or later immediately. Treat exposed issue-tracker installations as potentially compromised and review database, web, and authentication logs.
CVE-2026-12877 affects the Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 and is rated CVSS 9.1 CRITICAL. Unsanitized user input is incorporated into a SQL query in the standard front-end issue-tracker configuration. This allows unauthenticated attackers to perform SQL injection attacks against vulnerable sites.
🔗 Read more 🔗
Source: NVD
🔑 CAFEHAUS API Bug Enables Administrator Account Takeover
Sites running CAFEHAUS API through 1.0.0 should disable or replace the plugin until a fixed release is available. Reset privileged credentials and inspect administrator accounts and login activity because exploitation requires no authentication.
CVE-2026-12981 affects the CAFEHAUS API WordPress plugin through 1.0.0 and has a CVSS score of 7.5 HIGH. The password-update function lacks authentication and authorization checks. An unauthenticated attacker can reset the password of any user, including an administrator, and take full control of the account.
🔗 Read more 🔗
Source: NVD
📣 WowOptin REST Endpoint Allows Unauthenticated Site Changes
WordPress administrators using WowOptin should update to 1.4.38 or later promptly. Check for disabled campaigns and unexpected opt-in templates or database rows after patching.
CVE-2026-14603 affects the WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 and is rated CVSS 7.5 HIGH. A REST endpoint lacks proper authorization, allowing unauthenticated users to disable all opt-in forms. Attackers can also insert new template-based opt-in records into the WordPress database.
🔗 Read more 🔗
Source: NVD
🧠 GPU Synchronization Bug Triggers Kernel Use-After-Free
Administrators of systems using the affected GPU driver stack should deploy vendor-provided driver and kernel updates promptly. Multi-user workstations, compute hosts, and environments that run untrusted local workloads deserve particular attention.
CVE-2026-49743 is a CVSS 7.8 HIGH vulnerability in a GPU kernel synchronization workflow. A non-privileged local process can manipulate synchronization-object lifetimes because the reference count of an exported fence primitive is not properly incremented. Prematurely freeing that primitive can produce read and write use-after-free conditions in the kernel.
🔗 Read more 🔗
Source: NVD
🖥️ Malicious Guest GPU Commands Can Escape Virtualization Boundaries
Cloud, VDI, and virtualization operators using GPU passthrough or virtual GPU features should apply the relevant host driver and firmware fixes urgently. Restrict untrusted guest workloads until affected hosts are patched.
CVE-2026-49744 is rated CVSS 7.8 HIGH and affects virtualized GPU processing. Malicious kernel software inside a guest virtual machine can send improper commands to GPU firmware, causing writes outside the guest’s assigned virtual GPU memory. The resulting out-of-bounds access can support privilege escalation across virtualization boundaries.
🔗 Read more 🔗
Source: NVD
⚠️ Guest VM GPU Requests Enable Out-of-Bounds Memory Access
Operators of GPU-enabled virtual machines should install the applicable host, driver, and firmware updates as soon as possible. Prioritize shared infrastructure where customers or other untrusted parties control guest operating systems.
CVE-2026-49745 is a CVSS 7.8 HIGH vulnerability affecting virtualized GPU environments. Software running inside a guest virtual machine can submit crafted GPU commands that trigger out-of-bounds memory accesses. These accesses may be used to escalate privileges beyond the guest’s intended isolation boundary.
🔗 Read more 🔗
Source: NVD
📡 Apache NimBLE HCI Transport Vulnerable to Buffer Overflow
Apache NimBLE users should upgrade to 1.10.0, particularly where HCI controllers or socket peers are not fully trusted. The stated attack conditions reduce exposure, but embedded products with customized pool settings should still patch promptly.
CVE-2026-45811 affects Apache NimBLE through 1.9.0 and has a CVSS score of 7.5 HIGH. The HCI socket transport copies received events without first confirming that they fit in the configured event pool, creating a classic buffer overflow. Exploitation requires a misconfigured pool size or a malicious or compromised controller on the HCI socket link and is not reachable through ordinary over-the-air Bluetooth traffic.
🔗 Read more 🔗
Source: NVD
📶 Crafted Bluetooth BASS Messages Can Corrupt NimBLE Memory
Device makers and operators using the NimBLE BASS service should upgrade to 1.10.0 urgently. Prioritize products that allow easy or unattended pairing with nearby devices, as physical proximity is sufficient once BASS access is available.
CVE-2026-45813 affects the Apache NimBLE BASS service through 1.9.0 and is rated CVSS 8.8 HIGH. Improper validation of Add Source and Modify Source operation data can cause a stack buffer overflow or arbitrary out-of-bounds read. A nearby paired Bluetooth device can trigger the flaw, although pairing requirements and user interaction depend on the device configuration.
🔗 Read more 🔗
Source: NVD
🛑 Malformed BLE Response Can Crash Apache NimBLE Devices
Teams shipping products with Apache NimBLE should move to 1.10.0, especially where service disruption affects safety or availability. The prerequisite request reduces exploitability, but exposed BLE devices should not remain on vulnerable builds.
CVE-2026-45815 affects Apache NimBLE through 1.9.0 and has a CVSS score of 7.5 HIGH. A specially crafted ATT Read Multiple Variable Response can trigger a reachable assertion in the ATT parser. The target device must first send an ATT Read Multiple Variable Request, limiting the conditions under which the denial of service can be triggered.
🔗 Read more 🔗
Source: NVD