RECONINTEL
◄ BACK
// INTELLIGENCE FEED

RESEARCH

August 18, 2026 · 10 minCVSS 9.1CRITICAL

Unlimited AI Credits from One Integer: New API's Quota Overflow (CVE-2026-71479) and How to Check Your Gateway

New API (QuantumNous/new-api) is a self-hosted, OpenAI-compatible LLM gateway that meters each user's spend as a 64-bit integer quota. In versions up to and including v1.0.0-rc.17, the image count n — plus video duration and token-limit fields — enters the quota math with no upper bound. A large enough value overflows the signed-64-bit charge past 2^63 and it is reinterpreted as a negative number; a negative charge is a credit. CVE-2026-71479, CWE-190/CWE-682, CVSS 9.1 (C:N/I:H/A:H — billing integrity/availability, not code execution). Reported exploited in the wild on 2026-07-06; the maintainer shipped v1.0.0-rc.18 roughly two hours later, bounding quantities (MaxImageN=128) and routing quota math through saturating conversions. We reproduced it against New API's own unmodified image: one dall-e-3 request by a $0.10 account inflated the balance to $16,893,488,147,419.20 with a matching negative-quota consumption log, and the identical request on v1.0.0-rc.18 is rejected. The exact version is readable unauthenticated from the X-New-Api-Version header and GET /api/status.

READ ANALYSIS →
August 14, 2026 · 10 minCVSS 9.8CRITICAL

CyberPanel's Hard-Coded WebTerminal JWT Secret (CVE-2026-67614): Forging a Root Shell, and How to Find Exposed Panels

CyberPanel's WebTerminal — a browser SSH console served by a FastAPI app that runs as root on port 8888 — gates access with a JWT. In early 2.4.x the HS256 signing secret was a plain string literal committed to the source tree, identical on every install. Because HS256 is symmetric and the key is public, an unauthenticated attacker forges a token, sets the ssh_user claim to root, and opens an interactive root shell. CVE-2026-67614, CWE-798, CVSS 9.8 (v3.1; 9.3 under v4.0). We reproduced the direct form end to end against CyberPanel's own unmodified early-2.4.x service code in an isolated throwaway container — the forged token is accepted, the server binds a root SSH session, and id returns uid=0(root) — then verified the fix by replaying the identical token against the patched service, which rejects it with HTTP 403. The fix history is the interesting part: by 2.4.7–2.4.9 the literal was demoted to a fallback and the secret became per-install, but the design still trusted possession of the key, so the companion arbitrary file read (CVE-2026-67613) recovers it and reaches the same root shell. CyberPanel 3.0.0 only closed part of the chain; the maintainer-validated fix is 3.0.1, which removes the literal, requires a one-time server authorization per session, and refuses root outright. Fixed in 3.0.1.

READ ANALYSIS →
August 14, 2026 · 9 minCVSS 9.8ANALYSIS

FortiWeb RADIUS Wildcard Authentication Bypass (CVE-2026-26035): How to Check Whether Your Appliance Is Actually Exposed

Fortinet published FG-IR-26-158 on August 12, 2026: CVE-2026-26035 (CWE-287) lets a remote unauthenticated attacker log into the FortiWeb GUI or CLI with a random username and password — but only where an administrator account is remote (RADIUS) type with the explicitly non-default wildcard setting enabled. Coverage split between 9.8 Critical and Fortinet's own High rating is not a dispute: both numbers are Fortinet's, and 8.8 is simply the base 9.8 adjusted by temporal metrics (E:P × 0.94, RL:O × 0.95). The claim circulating that the lower score reflects configuration preconditions is wrong — AC:L and PR:N are unchanged in the base vector. The finding that changes what you do: Fortinet's own CNA record lists FortiWeb 7.0.0–7.0.12 as affected while the advisory's remediation table has no 7.0 row at all, leaving that branch with no in-branch fix and a migration rather than a patch. Fixed in 8.0.3 / 7.6.7 / 7.4.12 / 7.2.13.

READ ANALYSIS →
August 12, 2026 · 13 minCVSS 8.1ANALYSIS

MongoDB's Symbol-Type Authorization Bypass (CVE-2026-18690): When the Auth Check and the Command Disagree About the Target

MongoDB's August 11, 2026 disclosure bundles four Server CVEs, all fixed in 7.0.40 / 8.0.29 / 8.3.8. The headline, CVE-2026-18690 (CWE-863 Incorrect Authorization), is a precise authorization bypass: a database command names the collection it targets, and MongoDB parses that name twice — once to authorize, once to execute. Send the name as a BSON symbol instead of a string and the authorization parse collapses to a database-only namespace (so it checks the broad db resource a readWrite user already holds) while execution still resolves the real system collection. We reverse-engineered the exact vector from MongoDB's one-line source fix and reproduced it against a real MongoDB 8.0.28 — convertToCapped on a protected system collection returns Unauthorized with a string namespace but bypasses authorization with a symbol namespace — with the fix verified on 8.0.29. Same authz-vs-execution pattern as the Portainer proxy bypass, one process deep. All PR:L (authenticated, database-scoped). Fixed in 7.0.40 / 8.0.29 / 8.3.8.

READ ANALYSIS →
August 12, 2026 · 13 minCVSS 8.8ANALYSIS

Portainer's Docker Proxy Authorization Bypass (CVE-2026-44848): Eight Ways a Standard User Reaches the Host

In May 2026 Portainer patched eight vulnerabilities in its Docker/Kubernetes proxy in one coordinated batch — two of them Critical — that share a single design flaw: the authorization proxy models fewer request shapes than the Docker daemon accepts, and every gap is an RBAC bypass. The headline, CVE-2026-44848 (8.8), turns a standard user with access to one Docker environment into root on the host, because the /plugins/* endpoints were never registered with a handler and so were never checked. The batch is one bug in four shapes — the unrouted path, the second expression (CVE-2026-44849 / -44850), the check that did not return (CVE-2026-44882), and the non-canonical encoding (the 2.42.0 RawPath fix). Includes a runnable proof-of-concept, a vendor-agnostic audit for any proxy that fronts a privileged API, and a disciplined read on the still-unconfirmed CVE-2026-72533. All PR:L — authenticated non-admin, not internet-facing. Fixed in Portainer 2.41.0 / 2.39.2 / 2.33.8.

READ ANALYSIS →
August 11, 2026 · 11 minCVSS 9.9ANALYSIS

Red Hat OpenShift AI (CVE-2026-14450): Twenty CVEs and Three Ways a Namespace Tenant Becomes Cluster Admin

On August 10, 2026 Red Hat disclosed a wave of vulnerabilities across the OpenShift AI stack at once — the flagship 3.4.3 update alone bundles twenty CVEs. Individually they look scattered; together they are one architecture problem — privileged operators bolted onto Kubernetes act as confused deputies, so a low-privileged namespace tenant, or any pod already in the cluster, escalates to cluster-admin-equivalent access. Three cleanest instances, each reproduced in a local lab: CVE-2026-14450 (9.9), the MaaS API trusting X-MaaS-Username / X-MaaS-Group headers verbatim; CVE-2026-18948 (9.9), a Feast dill.loads() RCE that runs before the permission check; and CVE-2026-18951/-18982, operator permissions silently aggregated onto the built-in edit role. Includes a vendor-agnostic kubectl authority audit. Every flaw is PR:L with Scope: Changed — lateral movement, not internet RCE. Fixed in RHOAI 2.25.10 / 3.4.3 / 3.3.6.

READ ANALYSIS →
August 10, 2026 · 7 minCVSS 5.9ANALYSIS

CVE-2025-68686: FortiOS SSL-VPN Symlink Patch Bypass — How to Find Affected Instances

A CVSS 5.9 information-disclosure bug that CISA still put on the KEV catalog, with a federal deadline of August 10, 2026. The reason is what it undoes: in April 2025 Fortinet documented attackers planting a symlink in the SSL-VPN language-file directory, connecting the user filesystem to the root filesystem — a read-only channel that survived firmware upgrades because it lived in the user filesystem. Fortinet's fix removed the symlink and hardened the SSL-VPN UI against serving them. CVE-2025-68686 bypasses that hardening via crafted HTTP requests. Read-only, no code execution, and it requires a prior filesystem-level compromise — but FortiOS 7.2, 7.0 and 6.4 have no in-branch fix at all.

READ ANALYSIS →
August 10, 2026 · 7 minCVSS 10.0CRITICAL

CVE-2026-16812: Arista VeloCloud Orchestrator Unauthenticated Command Injection (CVSS 10.0) — How to Find Exposed Instances

An unauthenticated attacker can reach privileged internal functionality on Arista's VeloCloud Orchestrator and run OS commands on the host — CVSS 10.0 on both v3.1 and v4.0, CWE-78. Arista states it is actively exploited; CISA KEV-listed July 27, 2026 with a July 30 deadline. The mechanism is one sentence of the advisory: the functionality "was intended to be for internal use only and is not intended to be remotely accessible" — network topology used as a containment boundary. Advisory revision 1.1 added VeloCloud Orchestrator Hosted to the affected list, and Arista warns compromise may extend to VeloCloud Edge devices. Fixed in 5.2.3.14, 6.1.3.4, 6.4.2.4, and 7.0.0.1.

READ ANALYSIS →
July 22, 2026 · 7 minCVSS 9.8CRITICAL

CVE-2026-50522: SharePoint Deserialization RCE Now Actively Exploited (CISA KEV) — Detect Exposure and Evict Persistence

The unauthenticated SharePoint deserialization RCE demonstrated at Pwn2Own Berlin 2026 is now exploited in the wild and CISA KEV-listed with a July 25 deadline. CVSS 9.8 Critical (CWE-502), on-premises SharePoint Server only. The operational twist: attackers steal ASP.NET machine keys during exploitation, so patching closes the door but doesn't evict an intruder who already has the keys — patch, rotate keys, then hunt.

READ ANALYSIS →
July 22, 2026 · 6 minCVSS 8.4ANALYSIS

CVE-2026-64824: Home Assistant Backup-Restore Symlink Traversal — Find and Patch Affected Instances

Home Assistant Core's backup-restore function mishandles symlinks in tar archives: a crafted backup writes files to an arbitrary path, and on the root-running official Docker image that becomes RCE via a Python startup hook. Not the classic filename form of Zip Slip — a stateful symlink pivot that name-only validation can't catch. CVSS 9.3 (4.0) / 8.4 (3.1), CWE-22. Requires an administrator-authorized restore. Fixed in Home Assistant Core 2026.7.0.

READ ANALYSIS →
July 21, 2026 · 8 minCVSS 9.8ANALYSIS

Langflow RCE Chain (CVE-2026-9198): auto_login Auth Bypass Turns validate/code Into Unauthenticated Code Execution

IBM assigned CVE-2026-9198 (CVSS 9.8) to a specific Langflow chain: an unauthenticated caller mints a superuser token via /api/v1/auto_login (CVE-2026-9103), then runs Python via exec() at /api/v1/validate/code (CVE-2026-8481) — full RCE on default deployments. Now actively exploited: CISA added it to the KEV catalog on August 4, 2026, making six KEV-listed Langflow CVEs. A second unauthenticated webhook bypass (CVE-2026-8505) widens the front door, and two more critical flaws (CVE-2026-12940, CVE-2026-13435) followed on July 30. Fixed in Langflow 1.10.2.

READ ANALYSIS →
July 16, 2026 · 5 minCVSS 9.8

CVE-2026-25089: Fortinet FortiSandbox Unauthenticated OS Command Injection (CISA KEV)

Fortinet FortiSandbox contains a critical OS command injection in the web UI that lets unauthenticated attackers execute arbitrary commands. CVSS 9.8, actively exploited since mid-June, CISA KEV listed. Third FortiSandbox CVE exploited in 2026.

READ ADVISORY →
July 15, 2026 · 5 minCVSS 10.0

CVE-2026-15409: SonicWall SMA1000 SSRF Zero-Day (CVSS 10.0) — Find Exposed Appliances

SonicWall SMA1000 appliances contain a critical SSRF vulnerability in the WorkPlace portal. CVSS 10.0, actively exploited zero-day, CISA KEV listed with 3-day deadline. A second flaw enables post-auth OS command injection.

READ ADVISORY →
July 15, 2026 · 5 minCVSS 9.8

CVE-2026-58644: SharePoint Server Unauthenticated Deserialization RCE (July 2026 Patch Tuesday)

Microsoft SharePoint Server contains a deserialization vulnerability enabling unauthenticated remote code execution. CVSS 9.8 Critical, now CISA KEV-listed (actively exploited) — one of several July 2026 Patch Tuesday SharePoint flaws on the KEV catalog, alongside the sibling deserialization RCE CVE-2026-50522.

READ ADVISORY →
July 15, 2026 · 5 minCVSS 9.8

CVE-2026-56164: Microsoft SharePoint Server Authentication Bypass — Find Vulnerable Instances

Microsoft SharePoint Server contains a missing authentication vulnerability allowing unauthenticated privilege escalation. Actively exploited, CISA KEV listed with a 3-day deadline. NVD scores this 9.8 Critical while Microsoft rates it Moderate. Final security update for SharePoint 2016 and 2019.

READ ADVISORY →
July 2, 2026 · 5 minCVSS 8.8

CVE-2026-45659: SharePoint Server Authenticated Deserialization RCE (CISA KEV)

Microsoft SharePoint Server contains a deserialization vulnerability that lets authenticated attackers execute arbitrary code. CVSS 8.8, actively exploited, CISA KEV listed with a 3-day deadline. Patches available for SharePoint 2016, 2019, and Subscription Edition.

READ ADVISORY →
June 15, 2026 · 5 minCVSS 6.5

CVE-2026-20262: Cisco Catalyst SD-WAN Manager Path Traversal (Arbitrary File Write)

Cisco Catalyst SD-WAN Manager's web UI allows authenticated attackers to traverse paths and write arbitrary files, enabling privilege escalation to root. CVSS 6.5, CISA KEV listed, limited exploitation confirmed. All deployment types affected — no workarounds.

READ ADVISORY →
June 11, 2026 · 5 minCVSS 10.0

CVE-2026-10520: Ivanti Sentry Unauthenticated OS Command Injection (RCE)

Ivanti Sentry's MICS configuration API allows unauthenticated OS command injection with root-level execution. CVSS 10.0, actively exploited, CISA KEV listed with a 3-day deadline. Public PoC available.

READ ADVISORY →
June 10, 2026 · 5 minCVSS 9.8

CVE-2026-20253: Splunk Enterprise Unauthenticated File Access via PostgreSQL Sidecar

Splunk Enterprise's PostgreSQL sidecar service lacks authentication — any network-reachable attacker can create or truncate arbitrary files. CVSS 9.8 Critical, part of a 12-advisory batch including RCE via deserialization.

READ ADVISORY →
June 9, 2026 · 5 minCVSS 5.8CRITICAL

CVE-2026-7473: Arista EOS Tunnel Decapsulation Bypass — Find Affected Switches

Arista EOS switches incorrectly accept unexpected tunnel protocols, bypassing network segmentation. Actively exploited, CISA KEV listed, no patch planned — ACL mitigation only.

READ ANALYSIS →
June 3, 2026 · 5 minCVSS 9.8

CVE-2026-44825: Apache Solr Hardcoded Credentials — Detect Exposed Instances

Apache Solr's auth setup tool silently installs four accounts with passwords identical to their usernames. CVSS 9.8 Critical, no patch released yet. Affects 12,000+ organizations.

READ ADVISORY →
May 30, 2026 · 5 minCVSS 9.1

CVE-2026-0257: Palo Alto PAN-OS GlobalProtect Authentication Bypass — Find Exposed Firewalls

An actively exploited authentication bypass in PAN-OS GlobalProtect lets unauthenticated attackers establish VPN connections. CISA KEV listed with a 3-day remediation deadline.

READ ADVISORY →
May 29, 2026 · 5 minCRITICAL

CVE-2026-9874: Critical Chrome Dawn WebGPU Use-After-Free — How to Detect Vulnerable Browsers

A critical use-after-free in Chrome's Dawn WebGPU implementation could allow remote code execution. Part of a 151-vulnerability Chrome 148 update with 22 critical flaws across Dawn, WebGL, and ANGLE.

READ ANALYSIS →
May 29, 2026 · 5 minANALYSIS

Six Windows Zero-Days, Two Platform Bans: A Defender Triage Guide

A researcher dropped six Windows zero-days since early April and got banned from GitHub and GitLab. Three exploits remain unpatched. A practical triage checklist for defenders.

READ ANALYSIS →
May 27, 2026 · 6 minCVSS 6.5

CVE-2026-48710: Finding Vulnerable Starlette and FastAPI Services on Your Network

A Host header injection in Starlette bypasses path-based auth middleware. Affects FastAPI, vLLM, LiteLLM, MCP servers, and thousands of AI infrastructure services.

READ ADVISORY →
May 27, 2026 · 5 minCVSS 10.0

CVE-2026-20223: Finding Cisco Secure Workload (Tetration) on Your Network

A maximum-severity authentication bypass in Cisco Secure Workload (CVSS 10.0) lets unauthenticated attackers gain Site Admin access via an internal REST API. Identify instances on your network using RECON.

READ ADVISORY →
May 26, 2026 · 4 minCVSS 9.1

CVE-2026-35616: How to Find FortiClient EMS Instances on Your Network

A critical zero-day in Fortinet's endpoint management server has been actively exploited since late March. Walk through identifying FortiClient EMS instances using RECON.

READ ADVISORY →
// INTEL FEED

Get the next investigation

New CVE teardowns — root cause from the source, a working proof-of-concept, and how to check your own estate — in your inbox when they publish. No spam, unsubscribe anytime.