Monthly
A malicious external BuildKit frontend can issue crafted requests against the daemon's internal API that trigger a data race, causing the BuildKit daemon to panic and crash. The issue affects BuildKit deployments where the operator has opted into running an untrusted or attacker-controlled frontend (for example through a `# syntax=` reference to a third-party image); default builds that use trusted first-party frontends are not exposed. It is a medium-severity denial-of-service condition: exploitation requires low-level privileges (PR:L) through the frontend channel, local access (AV:L), and successful timing of a race (AT:P), and there is no public exploit identified at time of analysis. A vendor fix is available in BuildKit v0.33.1.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to cause denial of service by exploiting improper synchronization of shared resources. Both the Appliance and Application deployment forms are affected across versions prior to 5.36.00.16 and 5.36.00.00 respectively, as confirmed by Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to trigger denial of service against both the Appliance and Application deployment variants by exploiting improper synchronization of shared resources under concurrent access (CWE-567). Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00, with fixes detailed in Dell advisory DSA-2026-382. Notably, the vendor-supplied CVSS 3.1 vector records C:L/A:N, which conflicts with the stated denial-of-service impact - a likely metadata error, as availability impact is the primary concern here. No public exploit code or active exploitation has been confirmed at time of analysis.
Unsynchronized multithreaded access in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to cause denial of service and potentially minor data integrity or confidentiality impact. Both the Appliance variant (fixed in 5.36.00.16) and Application variant (fixed in 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis.
Cross-request data leakage in Apache Struts 7.2.1's JSON plugin allows an authenticated remote attacker to observe response content associated with a concurrent request belonging to a different user. The root cause is a thread-safety defect (CWE-567) in the SMD/JSON-RPC interceptor, where per-response serialization state is not isolated between concurrent requests. Exploitation is constrained to the non-default SMD/JSON-RPC mode of the JSON interceptor; no public exploit code has been identified at time of analysis, and the EPSS score of 0.15% (4th percentile) reflects the limited realistic exploitation surface.
Cross-request data exposure in the Apache Struts JSON plugin (version 7.2.1) results from per-request parsing state being improperly shared across concurrent requests, enabling information observable in one user's session to leak into another's. Authenticated remote attackers targeting applications that have explicitly enabled JSON action population can exploit this concurrency flaw (CWE-567) to read partial request data or circumvent configured parsing limits. With an EPSS of 0.15% (4th percentile), no CISA KEV listing, and no public exploit identified at time of analysis, real-world risk is low and narrowed further by the non-default plugin requirement.
When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. [CVSS 6.3 MEDIUM]
CVE-2025-48908 is a security vulnerability (CVSS 6.7). Remediation should follow standard vulnerability management procedures.
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A malicious external BuildKit frontend can issue crafted requests against the daemon's internal API that trigger a data race, causing the BuildKit daemon to panic and crash. The issue affects BuildKit deployments where the operator has opted into running an untrusted or attacker-controlled frontend (for example through a `# syntax=` reference to a third-party image); default builds that use trusted first-party frontends are not exposed. It is a medium-severity denial-of-service condition: exploitation requires low-level privileges (PR:L) through the frontend channel, local access (AV:L), and successful timing of a race (AT:P), and there is no public exploit identified at time of analysis. A vendor fix is available in BuildKit v0.33.1.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to cause denial of service by exploiting improper synchronization of shared resources. Both the Appliance and Application deployment forms are affected across versions prior to 5.36.00.16 and 5.36.00.00 respectively, as confirmed by Dell advisory DSA-2026-382. No public exploit code has been identified at time of analysis.
Race condition in Dell Secure Connect Gateway (SCG) 5.0 allows unauthenticated remote attackers to trigger denial of service against both the Appliance and Application deployment variants by exploiting improper synchronization of shared resources under concurrent access (CWE-567). Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00, with fixes detailed in Dell advisory DSA-2026-382. Notably, the vendor-supplied CVSS 3.1 vector records C:L/A:N, which conflicts with the stated denial-of-service impact - a likely metadata error, as availability impact is the primary concern here. No public exploit code or active exploitation has been confirmed at time of analysis.
Unsynchronized multithreaded access in Dell Secure Connect Gateway (SCG) 5.0 allows a low-privileged remote attacker to cause denial of service and potentially minor data integrity or confidentiality impact. Both the Appliance variant (fixed in 5.36.00.16) and Application variant (fixed in 5.36.00.00) are affected. No public exploit code or active exploitation has been identified at time of analysis.
Cross-request data leakage in Apache Struts 7.2.1's JSON plugin allows an authenticated remote attacker to observe response content associated with a concurrent request belonging to a different user. The root cause is a thread-safety defect (CWE-567) in the SMD/JSON-RPC interceptor, where per-response serialization state is not isolated between concurrent requests. Exploitation is constrained to the non-default SMD/JSON-RPC mode of the JSON interceptor; no public exploit code has been identified at time of analysis, and the EPSS score of 0.15% (4th percentile) reflects the limited realistic exploitation surface.
Cross-request data exposure in the Apache Struts JSON plugin (version 7.2.1) results from per-request parsing state being improperly shared across concurrent requests, enabling information observable in one user's session to leak into another's. Authenticated remote attackers targeting applications that have explicitly enabled JSON action population can exploit this concurrency flaw (CWE-567) to read partial request data or circumvent configured parsing limits. With an EPSS of 0.15% (4th percentile), no CISA KEV listing, and no public exploit identified at time of analysis, real-world risk is low and narrowed further by the non-default plugin requirement.
When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. [CVSS 6.3 MEDIUM]
CVE-2025-48908 is a security vulnerability (CVSS 6.7). Remediation should follow standard vulnerability management procedures.
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.