Monthly
Denial of service in HPE NonStop DNS 9.2.3 (Non Secure Version) lets an unauthenticated remote attacker disrupt the DNS service on affected NonStop systems by supplying crafted input that the service misinterprets. The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H (base 8.2) confirms network reachability, low attack complexity, no authentication and no user interaction, with a high availability impact, minor integrity impact and no confidentiality impact. Exposure is narrow - only HPE NonStop installations running this specific 'Non Secure Version' DNS component are affected, and reachability of the DNS listener determines real-world risk; no public exploit code identified at time of analysis and no confirmed active exploitation.
Certificate validation bypass in OpenVPN 2.7 alpha series (mbedTLS builds) causes the --x509-username-field directive to unintentionally accept certificates that should be rejected, potentially granting unauthorized VPN network access. Only deployments running a 2.7 alpha or pre-release build compiled against mbedTLS and explicitly configured with --x509-username-field are exposed; OpenVPN 2.6.x stable series and OpenSSL-backend builds are not affected. The vendor characterizes this as a low-priority security finding; no public exploit has been identified at time of analysis and it is not listed in the CISA Known Exploited Vulnerabilities catalog.
EDNS OPT filter bypass in DNSdist exposes backend DNS servers to EDNS extension options that DNSdist was configured to suppress. The flaw is triggered specifically by the EDNS Client Subnet (ECS) insertion code path, which silently normalizes a crafted malformed OPT record - one that evaded DNSdist's filter - into a syntactically valid OPT record forwarded to the upstream backend. No public exploit code exists and no active exploitation has been confirmed; CVSS rates this Low (3.7) reflecting both the high attack complexity and the limited integrity-only impact.
Image input manipulation in vLLM's multimodal preprocessing pipeline allows remote, unauthenticated network attackers to craft images with specific EXIF orientation or PNG tRNS transparency metadata that, when converted to RGB by vLLM, produces semantically altered image content fed to the LLM - affecting the integrity of inference outputs and potentially the reliability of the inference service. Affected deployments include Red Hat AI Inference Server across RHEL AI 3 and Red Hat OpenShift AI (RHOAI) environments. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog; however, sensitive inference workloads processing user-supplied images (e.g., document classification, content moderation) face a higher practical risk from subtle input distortion attacks.
Challenge payload splicing in the ALTCHA proof-of-work bot-protection libraries lets remote, unauthenticated attackers (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) reuse a previously solved challenge past its intended expiration by reinterpreting a valid HMAC-signed payload with an altered 'expires' parameter. Only deployments that trust the signed payload's embedded expiration without independently tracking consumed challenges are affected; the vendor explicitly conditions impact on 'server-side replay handling and deployment assumptions.' Impact is confined to abuse-prevention controls such as rate limiting and bot mitigation with no effect on data confidentiality or integrity (C:N/I:L/A:L), CISA KEV does not list this issue, no public exploit code has been identified at time of analysis, and the EPSS score of 0.46% (38th percentile) indicates low predicted exploitation activity.
CVE-2025-5826 is a security vulnerability (CVSS 6.3) that allows network-adjacent attackers. Remediation should follow standard vulnerability management procedures.
Remote code execution vulnerability in WOLFBOX Level 2 EV Charger devices caused by improper frame parsing in the Microcontroller Unit (MCU) firmware. Network-adjacent attackers with valid authentication credentials can exploit a frame start detection flaw to misinterpret command input and execute arbitrary code with full device privileges. While no public exploit code or active KEV listing is confirmed from the provided data, the CVSS 8.0 score and requirement for authentication (not public network access) suggest moderate real-world exploitability; however, this should be verified against EPSS scores and vendor advisories for actual threat intelligence integration.
A flaw was found in libsoup. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.
Denial of service in HPE NonStop DNS 9.2.3 (Non Secure Version) lets an unauthenticated remote attacker disrupt the DNS service on affected NonStop systems by supplying crafted input that the service misinterprets. The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H (base 8.2) confirms network reachability, low attack complexity, no authentication and no user interaction, with a high availability impact, minor integrity impact and no confidentiality impact. Exposure is narrow - only HPE NonStop installations running this specific 'Non Secure Version' DNS component are affected, and reachability of the DNS listener determines real-world risk; no public exploit code identified at time of analysis and no confirmed active exploitation.
Certificate validation bypass in OpenVPN 2.7 alpha series (mbedTLS builds) causes the --x509-username-field directive to unintentionally accept certificates that should be rejected, potentially granting unauthorized VPN network access. Only deployments running a 2.7 alpha or pre-release build compiled against mbedTLS and explicitly configured with --x509-username-field are exposed; OpenVPN 2.6.x stable series and OpenSSL-backend builds are not affected. The vendor characterizes this as a low-priority security finding; no public exploit has been identified at time of analysis and it is not listed in the CISA Known Exploited Vulnerabilities catalog.
EDNS OPT filter bypass in DNSdist exposes backend DNS servers to EDNS extension options that DNSdist was configured to suppress. The flaw is triggered specifically by the EDNS Client Subnet (ECS) insertion code path, which silently normalizes a crafted malformed OPT record - one that evaded DNSdist's filter - into a syntactically valid OPT record forwarded to the upstream backend. No public exploit code exists and no active exploitation has been confirmed; CVSS rates this Low (3.7) reflecting both the high attack complexity and the limited integrity-only impact.
Image input manipulation in vLLM's multimodal preprocessing pipeline allows remote, unauthenticated network attackers to craft images with specific EXIF orientation or PNG tRNS transparency metadata that, when converted to RGB by vLLM, produces semantically altered image content fed to the LLM - affecting the integrity of inference outputs and potentially the reliability of the inference service. Affected deployments include Red Hat AI Inference Server across RHEL AI 3 and Red Hat OpenShift AI (RHOAI) environments. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog; however, sensitive inference workloads processing user-supplied images (e.g., document classification, content moderation) face a higher practical risk from subtle input distortion attacks.
Challenge payload splicing in the ALTCHA proof-of-work bot-protection libraries lets remote, unauthenticated attackers (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) reuse a previously solved challenge past its intended expiration by reinterpreting a valid HMAC-signed payload with an altered 'expires' parameter. Only deployments that trust the signed payload's embedded expiration without independently tracking consumed challenges are affected; the vendor explicitly conditions impact on 'server-side replay handling and deployment assumptions.' Impact is confined to abuse-prevention controls such as rate limiting and bot mitigation with no effect on data confidentiality or integrity (C:N/I:L/A:L), CISA KEV does not list this issue, no public exploit code has been identified at time of analysis, and the EPSS score of 0.46% (38th percentile) indicates low predicted exploitation activity.
CVE-2025-5826 is a security vulnerability (CVSS 6.3) that allows network-adjacent attackers. Remediation should follow standard vulnerability management procedures.
Remote code execution vulnerability in WOLFBOX Level 2 EV Charger devices caused by improper frame parsing in the Microcontroller Unit (MCU) firmware. Network-adjacent attackers with valid authentication credentials can exploit a frame start detection flaw to misinterpret command input and execute arbitrary code with full device privileges. While no public exploit code or active KEV listing is confirmed from the provided data, the CVSS 8.0 score and requirement for authentication (not public network access) suggest moderate real-world exploitability; however, this should be verified against EPSS scores and vendor advisories for actual threat intelligence integration.
A flaw was found in libsoup. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.