Ruby on Rails has addressed a serious vulnerability in its Active Storage component, identified as CVE-2026-66066. This issue could allow unauthenticated attackers to read arbitrary files from servers running vulnerable applications, posing a significant risk of remote code execution. The vulnerability has a high severity rating, with a CVSS score of 9.5, meaning that it could be exploited easily if not patched. Applications that generate image variants are particularly at risk, as they may inadvertently expose sensitive files. Developers using Ruby on Rails should ensure they update their applications to mitigate this risk and protect sensitive data.
Adobe has addressed a serious security vulnerability in its Campaign Classic (ACC) platform, which is used for enterprise marketing automation. The flaw, identified as CVE-2026-48449, has a maximum severity score of 10.0, indicating it could allow attackers to execute arbitrary code without any user interaction. This issue stems from incorrect authorization processes within the software. Organizations using Adobe Campaign Classic need to apply the latest security updates to protect against potential exploitation, as the implications of this vulnerability could lead to unauthorized access and control over sensitive marketing data. Prompt action is essential to ensure the security of systems relying on this platform.
A critical code execution vulnerability, identified as CVE-2026-63077, has been discovered in TeamCity, a popular continuous integration and deployment tool. This flaw can be exploited without any authentication through the agent polling protocol, which poses a significant risk to organizations using this software. If left unaddressed, attackers could potentially execute arbitrary code on affected systems. Users of TeamCity are urged to apply the latest security patches to protect their environments. The urgency of this patch highlights the importance of keeping software up to date to safeguard against potential exploitation.
NASA's Core Flight System (cFS) Health & Safety (HS) Application has a vulnerability that could lead to denial-of-service attacks. Specifically, versions up to 7.0.1 are affected by a NULL pointer dereference issue, which could cause the application to crash under certain conditions. This flaw is linked to an incomplete fix for a previous vulnerability (CVE-2026-15352). Users are advised to update to the latest development branch available on NASA's GitHub repository, where a fix is in progress. This situation is critical as it impacts systems within the transportation sector and could compromise operational integrity worldwide.
A vulnerability has been identified in the Mitsubishi Electric CC-Link IE TSN Communication Protocol that could allow attackers on the same network segment to manipulate communication data. This vulnerability, tracked as CVE-2026-13584, can lead to denial-of-service (DoS) conditions by disrupting the control functions of affected products. A wide range of Mitsubishi Electric MELSEC MX controllers, motion modules, and various remote and safety modules are affected, including models MX-R300, MX-R500, and several others. Users of these devices should be aware of the potential risks, as the exploitation of this flaw could significantly impair operational capabilities. Addressing this vulnerability is crucial for maintaining the integrity and reliability of systems relying on this communication protocol.
MikroTik RouterOS has a critical vulnerability (CVE-2026-14227) that allows attackers to extract the router's WireGuard private key using low-privilege API access. This could enable them to impersonate the VPN and decrypt all associated traffic. The flaw affects all versions of MikroTik RouterOS where the API is enabled, posing a significant risk to users globally. The issue arises from an insufficient session expiration, which means users may retain access even after their permissions have been downgraded. MikroTik advises that administrators log out affected users to enforce new permission policies effectively.
Toptech Systems has reported a serious vulnerability in its RCU II+ and Multiload II+ products, which could allow attackers to gain unauthorized control over these devices. The flaw, identified as CVE-2026-12562, affects all versions of RCU II+ and Multiload II+ released before November 24, 2025. This vulnerability stems from a debug interface that lacks authentication, enabling attackers to access the system's Linux environment directly. If exploited, this could lead to significant manipulation of connected networks and resources. Users are urged to take defensive measures, including isolating the devices from untrusted networks and applying available vulnerability removal tools or firmware updates to protect against potential exploitation.
A vulnerability has been identified in Watchfire Controller Software that could allow attackers to deliver malicious firmware and gain full control of affected devices. The flaw, designated as CVE-2026-5846, impacts several versions of the software, including BC550 12.30, BC750 11.33 and 12.35, BC760 12.38 and 13.00, and BC760DC 12.39. This issue arises from the use of hard-coded cryptographic keys within the firmware, which are stored in plaintext, posing a significant security risk. Users of the affected software, primarily in sectors such as healthcare and financial services, are urged to apply security patches provided by Watchfire to mitigate the risk. While no public exploitation of this vulnerability has been reported yet, organizations are advised to take proactive measures to secure their systems against potential attacks.
Johnson Controls has identified multiple vulnerabilities in their OpenBlue Employee software, specifically versions up to V2025.3.1. These flaws could allow attackers to upload malicious files, execute cross-site scripting (XSS) attacks, or inject harmful HTML content, posing significant risks to users. The vulnerabilities are particularly concerning as they affect critical infrastructure sectors, including manufacturing, transportation, and energy. Johnson Controls advises users to apply the latest updates and implement strong access controls to mitigate potential risks. The company has outlined specific defensive measures to help secure the application and protect users from exploitation.
MZ Automation GmbH's libiec61850 library, used in critical infrastructure like energy systems, has several vulnerabilities that could lead to denial-of-service attacks. Versions prior to 1.6.2 are affected by multiple issues, including improper validation of timestamps and flaws in the GOOSE and MMS message processing. Attackers could exploit these weaknesses by sending specially crafted messages, causing the affected services to crash. This poses a significant risk to operational reliability in systems relying on this library. Users are urged to update to version 1.6.2 to mitigate these risks.
MZ Automation's lib60870 version 2.4.0 has been found to have serious vulnerabilities that could lead to device crashes. Specifically, two CVEs (CVE-2026-61893 and CVE-2026-63033) involve out-of-bounds read issues triggered by maliciously crafted IEC 60870-5-104 I-frames. These vulnerabilities affect systems in critical infrastructure sectors, including energy and water management, and have been reported globally. Users are advised to update to version 2.4.1 as a mitigation step to protect against potential exploits. Currently, there have been no reports of these vulnerabilities being actively exploited in the wild.
Cisco's Secure Firewall Management Center (FMC) is facing a significant security issue due to a vulnerability identified as CVE-2026-20316. This flaw allows attackers to exploit static credentials associated with a low-privileged user account within the FMC's web interface. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, indicating that this vulnerability is being actively exploited by malicious actors. Organizations using Cisco FMC should take immediate action to secure their systems, as the exploitation of these credentials could lead to unauthorized access and potential control over network security settings. The report of this vulnerability was made by Jimi Sebree from Horizon3.ai, highlighting the urgency for affected users to address this issue promptly.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability affecting the Cisco Secure Firewall Management Center (FMC) to its Known Exploited Vulnerabilities catalog. This flaw, identified as CVE-2026-20316, has a CVSS score of 5.3, indicating a moderate level of severity. Organizations using Cisco FMC should take this seriously as the vulnerability could potentially be exploited by attackers. CISA's inclusion of this flaw in their catalog signals a heightened risk, urging companies to assess their security measures. It's crucial for users to stay updated and implement necessary patches to protect their systems from potential exploitation.
Ruby on Rails has addressed a serious vulnerability in its Active Storage component, identified as CVE-2026-66066, which has a CVSS score of 9.5. This flaw allows unauthenticated attackers to potentially access sensitive files on application servers through manipulated image uploads. The vulnerability could expose critical information, including the Rails process environment, secret_key_base, database passwords, and cloud storage credentials. Developers using Ruby on Rails should act quickly to secure their applications, as the ramifications of this flaw could lead to significant data breaches. The vulnerability underscores the importance of maintaining up-to-date software to protect against such risks.
Researchers have identified a serious vulnerability in Ruflo, an open-source agent meta-harness used for AI models like Anthropic Claude Code and OpenAI Codex. This flaw, known as CVE-2026-59726, has a maximum severity rating of 10.0, indicating that it allows unauthenticated attackers to execute remote commands on affected systems. The vulnerability impacts all versions of Ruflo prior to 3.16.3, making it critical for users to update to this version or later. If exploited, this could lead to unauthorized access and manipulation of AI memory, posing risks to data integrity and security. Organizations using Ruflo should prioritize applying the latest updates to safeguard their systems.