Knowledge Base

In Discourse versions from 1.9.0.beta2 prior to 1.9.0.beta13 a medium severity vulnerability CVE-2017-20290 was detected. This vulnerability allows an unauthenticated attacker to execute arbitrary JavaScript in a victim’s browser via a Reflected Cross-Site Scripting (XSS) attack. This occurs due to the lack of proper sanitization of the email parameter on the /email/unsubscribed endpoint. Because the unsubscribed.html.erb template renders this input unescaped using the html_safe method, an attacker can craft a malicious GET request (for example, containing an SVG onload payload). If a victim visits the crafted link, the malicious script will be executed within the context of their session. Note: Active exploitation of this vulnerability has been observed in the wild. To address this issue, users should upgrade Discourse to version 1.9.0.beta13 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2017-20290.

In Elasticsearch versions from 8.0.0 before 8.19.17, 9.0.0 before 9.3.6, and 9.4.0 before 9.4.3 a medium severity vulnerability CVE-2026-56148 was detected. This vulnerability allows an authenticated attacker to cause a Denial of Service (DoS) condition on the affected node. This occurs due to an Uncontrolled Recursion flaw triggered during query processing. By submitting a specially crafted query, an attacker can force the system into excessive resource allocation, quickly exhausting available resources and rendering the node completely unavailable. To address this issue, users should upgrade Elasticsearch to versions 8.19.17, 9.3.6, 9.4.3, or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-56148.

In GitLab CE/EE versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 a critical severity vulnerability CVE-2026-110264 was detected. This vulnerability allows an unauthenticated attacker to execute arbitrary code on the GitLab server, potentially leading to a full system compromise. This occurs due to an integer overflow flaw that is triggered when the application compiles a specially crafted regular expression. By supplying malicious input that gets evaluated as a regex pattern under certain conditions, an attacker can exploit this weakness to run unauthorized commands. To address this issue, users should upgrade GitLab CE/EE to versions 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, 19.5.1, or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-110264.

In Elasticsearch versions from 8.0.0 before 8.19.19, 9.0.0 before 9.3.8, and 9.4.0 before 9.4.4 a medium severity vulnerability CVE-2026-63140 was detected. This vulnerability allows a low-privileged authenticated user with read access to at least one index to cause a Denial of Service (DoS). This occurs due to a Reachable Assertion flaw during query parsing. By submitting a specially crafted search request containing a null value in a specific query clause, an attacker can trigger an internal assertion failure. Because Elasticsearch treats assertion failures as fatal errors, the affected node process is immediately terminated. In a single-node deployment, this fully stops the service, while in a multi-node cluster, it reduces overall capacity. To address this issue, users should upgrade Elasticsearch to versions 8.19.19, 9.3.8, 9.4.4, or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-63140.

In Dolibarr ERP CRM versions prior to 24.0.0 a high severity vulnerability CVE-2026-116219 was detected. This vulnerability allows an authenticated administrator to execute arbitrary operating system commands as the web server user. This occurs due to an OS command injection flaw within the htdocs/admin/tools/export.php script. An attacker can bypass the restrict_os_commands allowlist by submitting a manipulated mysqldump value, chaining malicious commands with & characters around an allowlisted basename. To address this issue, users should upgrade Dolibarr ERP CRM to version 24.0.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-116219.

In Joomla! versions from 4.0.0 before 5.4.8, and 6.0.0 before 6.1.3 a medium severity vulnerability CVE-2026-72532 was detected. This vulnerability allows an unauthorized user to create categories, leading to unwanted structural modifications on the site. This occurs due to improper Access Control List (ACL) checks within the category webservice endpoints. By sending requests directly to these APIs, an attacker can bypass the intended access restrictions and generate new categories without possessing the required permissions. To address this issue, users should upgrade Joomla! to versions 5.4.8, 6.1.3, or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-72532.