Monthly
Supply-chain remote code execution affects NousResearch Hermes Agent versions 0.18.2 through 0.18.x (prior to 0.19.0), where the bundled MCP catalog references a third-party upstream repository via a mutable git branch instead of a pinned commit SHA. An attacker who compromises that upstream repository can push malicious code that is automatically pulled onto every host installing the affected catalog entry, achieving code execution with no further operator action. Reported by VulnCheck; a vendor patch exists (v0.19.0) but there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Spring for GraphQL's bundled GraphiQL developer IDE loads third-party JavaScript libraries from a public CDN without Subresource Integrity (SRI) verification, allowing any attacker capable of tampering with CDN responses to inject and execute arbitrary JavaScript in any browser that loads the GraphiQL page. All four maintained release lines are affected (1.0.x through 2.0.4), as confirmed by the VMware/Spring security advisory and EUVD-2026-67175. No public exploit code has been identified at time of analysis, and EPSS at 0.11% (2nd percentile) reflects currently minimal exploitation activity.
Remote code execution in Time4Popcorn - a Popcorn Time media-streaming fork - affects the Windows client (<= 6.2.1.18), macOS client (<= 6.2.1.17), and Android client (<= 3.5.0.173) through the application's auto-update mechanism (updater.exe on Windows, the PT.updd component on macOS). Because the updater fetches and executes update payloads without verifying their integrity (CWE-494), an attacker able to influence the update channel can deliver and run arbitrary code on the victim host. No CISA KEV listing, no public exploit is identified at time of analysis, and EPSS is low at 0.26% (18th percentile).
HCL BigFix Quantum Risk Analyzer contains a hardcoded external resource reference combined with absent binary integrity verification, exposing the product to binary substitution attacks and potential sensitive information disclosure. The affected CPE covers all versions of the product under hclsoftware. A locally privileged attacker could exploit the missing integrity check (CWE-494) to substitute a malicious binary fetched from the hardcoded external reference, achieving high-integrity impact. No public exploit code exists and CISA KEV does not list this vulnerability at time of analysis.
Untrusted code execution in NVIDIA NemoClaw for Linux (versions up to and including 0.0.21) stems from the installer executing code without verifying its integrity, letting an attacker who can supply or interpose malicious code during installation achieve arbitrary code execution, privilege escalation, data tampering, information disclosure, and denial of service. NVIDIA assigns a CVSS of 9.8 with a fully network-based, no-privilege, no-interaction vector, though the flaw is rooted in the install process. There is no public exploit identified at time of analysis, EPSS is low at 0.25% (17th percentile), and CISA SSVC records no known exploitation.
Unverified code download in NVIDIA NemoClaw installation scripts for Linux (versions 0.0.0 through 0.0.21) allows a network-positioned attacker to substitute malicious payloads during installation, enabling code execution, privilege escalation, information disclosure, and data tampering on the target host. The root cause is CWE-494: the installation pipeline fetches remote code without cryptographic integrity verification, leaving the download channel open to man-in-the-middle substitution or upstream server compromise. No public exploit has been identified at time of analysis; EPSS sits at 0.20% (9th percentile) and SSVC confirms Exploitation: none, placing this firmly in the theoretical high-severity category rather than an actively exploited threat.
Arbitrary code injection in the Natural Language Toolkit (NLTK) before 3.9.3 stems from the downloader module extracting downloaded corpora and model packages without verifying their integrity, allowing an attacker positioned to tamper with the download (man-in-the-middle or DNS poisoning) to substitute malicious archive contents that are unpacked onto the victim host. All NLTK versions prior to 3.9.3 are affected (CWE-494). Reported by VulnCheck; a vendor patch exists, but no public exploit has been identified and it is not listed in CISA KEV.
Remote code execution in Ozols Grupa OZOLS on Windows (all versions before 1.1.1233) stems from an abandoned automatic-update domain that the OzolsSQL client still trusts. Because updates are pulled over cleartext with no integrity or signature check, anyone who re-registers the lapsed domain (or performs a network MITM) can serve a malicious serv_update.vbs that the <db>_update SQL Server Agent job executes as ActiveScripting, yielding full host compromise. The flaw carries a CVSS 4.0 base of 10.0; it was reported by ENISA (EUVD-2026-62704) with a vendor patch available, and no public exploit or CISA KEV listing is identified at time of analysis.
Arbitrary code execution is possible in stigmem-node versions before 0.9.0a2 when a single configuration flag is used to disable plugin signature enforcement without a required second acknowledgment. Operators who carry this permissive setting from development into shared or production environments create a condition where any user with write access to the plugin directory can inject and execute unsigned, potentially malicious plugin code with the process's privileges. No public exploit code has been identified and no active exploitation is confirmed (not listed in CISA KEV); however, the resulting impact is full confidentiality, integrity, and availability compromise of the affected system.
Remote code execution in ZeroBrew 0.3.1 and prior exploits the absence of SHA-256 checksum validation in the Ruby compatibility shim (shim.rb), enabling a network-positioned attacker to substitute malicious archives or patch files during source builds. The attack surface is specifically the 'zb install --build-from-source' workflow, where secondary resource downloads and URL-based patch fetches proceed without any integrity check, allowing attacker-controlled content to execute arbitrary build steps. No public exploit code and no CISA KEV listing have been identified at time of analysis; vendor-confirmed patch v0.3.2, released 2026-06-11, closes the gap by adding pre-extraction SHA-256 verification.
Supply-chain remote code execution affects NousResearch Hermes Agent versions 0.18.2 through 0.18.x (prior to 0.19.0), where the bundled MCP catalog references a third-party upstream repository via a mutable git branch instead of a pinned commit SHA. An attacker who compromises that upstream repository can push malicious code that is automatically pulled onto every host installing the affected catalog entry, achieving code execution with no further operator action. Reported by VulnCheck; a vendor patch exists (v0.19.0) but there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Spring for GraphQL's bundled GraphiQL developer IDE loads third-party JavaScript libraries from a public CDN without Subresource Integrity (SRI) verification, allowing any attacker capable of tampering with CDN responses to inject and execute arbitrary JavaScript in any browser that loads the GraphiQL page. All four maintained release lines are affected (1.0.x through 2.0.4), as confirmed by the VMware/Spring security advisory and EUVD-2026-67175. No public exploit code has been identified at time of analysis, and EPSS at 0.11% (2nd percentile) reflects currently minimal exploitation activity.
Remote code execution in Time4Popcorn - a Popcorn Time media-streaming fork - affects the Windows client (<= 6.2.1.18), macOS client (<= 6.2.1.17), and Android client (<= 3.5.0.173) through the application's auto-update mechanism (updater.exe on Windows, the PT.updd component on macOS). Because the updater fetches and executes update payloads without verifying their integrity (CWE-494), an attacker able to influence the update channel can deliver and run arbitrary code on the victim host. No CISA KEV listing, no public exploit is identified at time of analysis, and EPSS is low at 0.26% (18th percentile).
HCL BigFix Quantum Risk Analyzer contains a hardcoded external resource reference combined with absent binary integrity verification, exposing the product to binary substitution attacks and potential sensitive information disclosure. The affected CPE covers all versions of the product under hclsoftware. A locally privileged attacker could exploit the missing integrity check (CWE-494) to substitute a malicious binary fetched from the hardcoded external reference, achieving high-integrity impact. No public exploit code exists and CISA KEV does not list this vulnerability at time of analysis.
Untrusted code execution in NVIDIA NemoClaw for Linux (versions up to and including 0.0.21) stems from the installer executing code without verifying its integrity, letting an attacker who can supply or interpose malicious code during installation achieve arbitrary code execution, privilege escalation, data tampering, information disclosure, and denial of service. NVIDIA assigns a CVSS of 9.8 with a fully network-based, no-privilege, no-interaction vector, though the flaw is rooted in the install process. There is no public exploit identified at time of analysis, EPSS is low at 0.25% (17th percentile), and CISA SSVC records no known exploitation.
Unverified code download in NVIDIA NemoClaw installation scripts for Linux (versions 0.0.0 through 0.0.21) allows a network-positioned attacker to substitute malicious payloads during installation, enabling code execution, privilege escalation, information disclosure, and data tampering on the target host. The root cause is CWE-494: the installation pipeline fetches remote code without cryptographic integrity verification, leaving the download channel open to man-in-the-middle substitution or upstream server compromise. No public exploit has been identified at time of analysis; EPSS sits at 0.20% (9th percentile) and SSVC confirms Exploitation: none, placing this firmly in the theoretical high-severity category rather than an actively exploited threat.
Arbitrary code injection in the Natural Language Toolkit (NLTK) before 3.9.3 stems from the downloader module extracting downloaded corpora and model packages without verifying their integrity, allowing an attacker positioned to tamper with the download (man-in-the-middle or DNS poisoning) to substitute malicious archive contents that are unpacked onto the victim host. All NLTK versions prior to 3.9.3 are affected (CWE-494). Reported by VulnCheck; a vendor patch exists, but no public exploit has been identified and it is not listed in CISA KEV.
Remote code execution in Ozols Grupa OZOLS on Windows (all versions before 1.1.1233) stems from an abandoned automatic-update domain that the OzolsSQL client still trusts. Because updates are pulled over cleartext with no integrity or signature check, anyone who re-registers the lapsed domain (or performs a network MITM) can serve a malicious serv_update.vbs that the <db>_update SQL Server Agent job executes as ActiveScripting, yielding full host compromise. The flaw carries a CVSS 4.0 base of 10.0; it was reported by ENISA (EUVD-2026-62704) with a vendor patch available, and no public exploit or CISA KEV listing is identified at time of analysis.
Arbitrary code execution is possible in stigmem-node versions before 0.9.0a2 when a single configuration flag is used to disable plugin signature enforcement without a required second acknowledgment. Operators who carry this permissive setting from development into shared or production environments create a condition where any user with write access to the plugin directory can inject and execute unsigned, potentially malicious plugin code with the process's privileges. No public exploit code has been identified and no active exploitation is confirmed (not listed in CISA KEV); however, the resulting impact is full confidentiality, integrity, and availability compromise of the affected system.
Remote code execution in ZeroBrew 0.3.1 and prior exploits the absence of SHA-256 checksum validation in the Ruby compatibility shim (shim.rb), enabling a network-positioned attacker to substitute malicious archives or patch files during source builds. The attack surface is specifically the 'zb install --build-from-source' workflow, where secondary resource downloads and URL-based patch fetches proceed without any integrity check, allowing attacker-controlled content to execute arbitrary build steps. No public exploit code and no CISA KEV listing have been identified at time of analysis; vendor-confirmed patch v0.3.2, released 2026-06-11, closes the gap by adding pre-extraction SHA-256 verification.