Loading story…
Collibra disclosed two critical vulnerabilities in the Collibra Platform Agent that can be chained to achieve unauthenticated remote code execution in enterprise data management environments. The issues, tracked as CVE-2026-10622 and CVE-2026-10621, affect the agent's exposed REST functionality and archive extraction process. According to the advisory and CERT/CC note VU#873170, the first flaw allows access to privileged /rest/* endpoints without proper authentication or authorization, while the second is a Zip Slip path traversal bug that can write files outside intended directories.
An attacker could use the exposed REST endpoints to map the file system and then exploit the archive extraction flaw to place a malicious JSP web shell in a web-accessible location, potentially leading to arbitrary code execution as root. The risk is heightened because the agent may bind to all network interfaces and could be reachable from the public internet. Collibra released fixes for SaaS and self-hosted deployments, advised on-premises customers to upgrade to versions 2026.03 or 2025.10, and recommended restricting REST interface exposure to trusted networks and monitoring logs for unauthorized script execution.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
A threat notice reported that Collibra fixed two critical vulnerabilities, CVE-2026-10622 and CVE-2026-10621, that can be chained for unauthenticated compromise and remote code execution. The notice said SaaS and self-hosted deployments were fixed, and on-premise customers were advised to upgrade to versions 2026.03 or 2025.10.
CERT/CC published vulnerability note VU#873170 covering improper authentication and path traversal vulnerabilities in the Collibra Agent.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ivanti disclosed and patched multiple vulnerabilities in **Endpoint Manager (EPM)**, led by **`CVE-2024-29847`**, a critical unauthenticated remote code execution flaw in the **Agent Portal** service affecting versions prior to **EPM 2022 SU6** and the **2024 September update**. Ivanti rated the deserialization bug **CVSS 10.0** and said it could let remote attackers execute code without authentication; the September advisory also listed additional weaknesses including **XXE**, multiple **SQL injection** flaws that could lead to RCE, authentication issues in **Network Isolation** and **Patch Management**, API secret exposure, spoofing of isolation status, and a local privilege escalation bug in the EPM agent. Technical analysis of `CVE-2024-29847` said the vulnerable `Agentportal.exe` service exposed a **.NET Remoting** TCP endpoint with a dynamically assigned port and no transport security, allowing insecure deserialization against the `LANDesk.AgentPortal.IAgentPortal` interface. The researcher reported that exploitation remained possible even with the .NET Remoting type filter set to **Low**, adapting prior techniques to bypass remoting restrictions, gain code execution, and write an **ASP.NET web shell** into a public IIS application directory; the writeup further claimed the compromise could be escalated from the IIS application pool context to **`NT AUTHORITY\SYSTEM`** by abusing leaked token handles in the worker process.
Aug 1, 2026
Tenable disclosed a critical path traversal vulnerability, tracked as **`CVE-2026-15265`**, affecting **Tenable/Nessus Agent** on **Linux, Windows, and macOS**. The flaw allows a privileged attacker to write arbitrary files outside the intended plugin directory, creating a path to **remote code execution**. The issue affects **version 11.2.0** and **11.1.3 and earlier**, and has been classified under **`CWE-22`** and **`CWE-347`** with high impact to confidentiality, integrity, and availability. Tenable released fixes in **versions 11.2.1 and 11.1.4**, and the **Canadian Centre for Cyber Security** issued advisory **AV26-705** urging organizations to review Tenable’s guidance and apply updates. CISA enrichment cited in vulnerability tracking data indicates **no known exploitation** so far, but assessed the technical impact as total, reinforcing the need for rapid patching across exposed agent deployments.
Jul 16, 2026
A critical remote code execution flaw, **`CVE-2026-61447`**, was disclosed in the PraisonAI AI agent framework, affecting versions before **`1.6.78`**. The vulnerability lies in **`CodeAgent._execute_python()`**, which executes LLM-generated Python without AST validation, import restrictions, or sandbox enforcement, allowing attackers to use prompt injection to make the agent run arbitrary code on the host. The issue received the maximum severity rating of **CVSS 10.0** under both v3.1 and v4.0. Successful exploitation can result in full host compromise and theft of sensitive data, including API keys, cloud credentials, database passwords, and other environment secrets, with potential pivoting into connected services. PraisonAI **`1.6.78`** fixes the issue, and defenders are being urged to upgrade immediately, reduce network exposure, rotate potentially exposed secrets, and monitor for anomalous outbound connections; no confirmed in-the-wild exploitation had been reported at disclosure time.
Jul 11, 2026