Loading story…
NSA's Ghidra received multiple high-severity vulnerability disclosures affecting versions before 12.1 and, for one issue, before 12.0.2. The most critical findings include unauthenticated remote code execution in the Shared Project feature (CVE-2026-52751), where a malicious project file with a ghidra:// URL can trigger unsafe RMI deserialization before authentication when opened through File → Open Project. Advisories said the client uses ObjectInputStream.readObject() without a client-side ObjectInputFilter, and a working gadget chain exists using the bundled Jython 2.7.4 library. A separate Windows-specific flaw (CVE-2026-52750) allows command injection when a user clicks a malicious URL embedded in program comments because cmd.exe metacharacters are not properly escaped.
Additional disclosures affect other Ghidra components. CVE-2026-52758 is a SQL injection flaw in BSim search filters that lets a low-privileged remote attacker inject arbitrary SQL into PostgreSQL-backed queries and potentially read, modify, or delete database contents. CVE-2026-52752 is a path traversal bug in the extension installer that mishandles ZIP entry names such as ../, allowing files to be written outside the intended directory and potentially leading to code execution. The RMI deserialization issue reportedly affects standard Ghidra releases with Shared Project support since 9.1 across Linux, macOS, and Windows, and the disclosures point to fixes and mitigations in Ghidra 12.1 and related security advisories.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
On 2026-06-10, CVE-2026-52754 was received by disclosure@vulncheck.com for an authentication bypass flaw in Ghidra before version 12.1. The issue in PKIAuthenticationModule.authenticate() allows a user with a valid CA-signed certificate to impersonate other users by supplying their public certificate with a null signature, enabling privilege escalation and repository compromise.
On 2026-06-10, CVE-2026-52758 was disclosed for Ghidra versions before 12.1, describing a SQL injection flaw in BSim filter handling. The advisory said a remote low-privileged attacker could inject arbitrary SQL through the BSim network query protocol and read, modify, or delete PostgreSQL data.
On 2026-06-10, a new vulnerability record for CVE-2026-52751 was added for Ghidra versions before 12.1, covering unsafe deserialization in the client-side Shared Project RMI connection code. The issue enables unauthenticated remote code execution when a user opens a malicious project file that triggers deserialization through a crafted ghidra:// URL.
On 2026-06-10, a path traversal vulnerability tracked as CVE-2026-52752 was disclosed for Ghidra versions before 12.0.2. The flaw stems from improper validation of ZIP entry names in the extension installer and can let a malicious extension write files outside the intended directory, potentially leading to code execution.
On 2026-06-10, CVE-2026-52750 was received by disclosure@vulncheck.com for a Windows command injection flaw in Ghidra's URL annotation handling. The issue affects versions before 12.1 and allows arbitrary command execution if a victim clicks a malicious link embedded in program comments.
On 2026-05-14, the National Security Agency's Ghidra project published a GitHub security advisory describing an unauthenticated remote code execution flaw in Ghidra's client-side Shared Project RMI handling. The advisory said the issue affected standard releases since version 9.1 and could be triggered by opening a malicious project file containing a ghidra:// URL.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
7 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourcevulncheck.com
Open sourcecvefeed.io
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Several open source projects disclosed serious vulnerabilities affecting developer and infrastructure tooling, including remote code execution, SQL injection, server-side request forgery, prompt-driven query injection, and path traversal. **Coder Workspace Agent** patched `GHSA-QRWJ-VH9X-GW5V`, a cross-agent SSRF flaw that let an authenticated attacker controlling one workspace agent abuse HTTP `307`/`308` redirects to replay privileged requests to another agent, enabling cross-tenant file access, file writes, and command execution; fixes were released in versions `v2.34.4`, `v2.33.10`, `v2.32.9`, and `v2.29.19 ESR`. **Coolify** disclosed a critical authenticated command injection issue tied to unsafe handling of deployment fields such as `dockerfile_location`, allowing RCE and secrets exposure through deployment logs, while **OpenRemote** fixed `GHSA-cgfv-jrfp-2r7v`, an authenticated SQL injection bug in datapoint crosstab export that could expose other tenants’ data, Keycloak configuration, and encrypted credentials. Additional disclosures affected AI and package-management components. **Langroid** fixed a prompt-injection-driven flaw in `Neo4jChatAgent` that executed LLM-generated Cypher without validation, allowing unauthorized graph operations and possible OS-level impact when dangerous Neo4j procedures were enabled; the issue was resolved in version `0.65.5` with new safety controls that were also extended to `ArangoChatAgent`. **pnpm** also reported a path traversal weakness in `configDependencies` processing from `pnpm-lock.yaml`, where a malicious repository could force symlink creation outside `node_modules/.pnpm-config` even with `--ignore-scripts`, creating a filesystem write primitive within or potentially beyond the project directory.
Jul 10, 2026
Several **high-severity vulnerability disclosures** were published across widely used developer and infrastructure components, with impacts ranging from **remote code execution (RCE)** to **account takeover** and **arbitrary host file writes**. In *Gogs* (self-hosted Git service), three CVEs were reported: **CVE-2025-64111** (CVSS 9.3) enables RCE by bypassing checks in `UpdateRepoFile` to modify `.git/config` via the API (described as an insufficient fix for an earlier issue); **CVE-2025-64175** (CVSS 7.7) allows a **cross-account 2FA recovery-code bypass** in versions `0.13.3` and earlier if an attacker already has a victim’s username/password; and **CVE-2026-24135** (CVSS 7.2) is a wiki rename path traversal that can delete arbitrary files by manipulating `old_title`. Separately, *Jinjava* (HubSpot CMS template engine) disclosed **CVE-2026-25526** (CVSS 9.8), a sandbox escape chain that permits arbitrary Java code execution by abusing `ForTag` iteration behavior (Bean ELResolver restriction bypass) and `ObjectMapper`-based JSON deserialization to instantiate disallowed classes. A critical Kubernetes storage issue was also disclosed in *Kubernetes Local Path Provisioner*: **CVE-2025-62878** (CVSS 10.0) allows directory traversal via the `parameters.pathPattern` setting, enabling a user who can create storage resources to provision volumes in arbitrary host locations (e.g., `/etc`) and potentially overwrite sensitive files on cluster nodes. In parallel to these product flaws, separate research reported widespread **exposure of Git metadata** on the public internet—approximately **4.96 million** IPs with accessible `.git` directories and **250,000+** exposing `.git/config` files that may contain deployment credentials—highlighting a common, high-impact misconfiguration pattern that can enable source code reconstruction and secret theft. Active exploitation activity was reported for *Ivanti Endpoint Manager Mobile (EPMM)* involving **CVE-2026-1281** and **CVE-2026-1340**, where attackers were observed dropping `/mifs/403.jsp` and using a Base64-delivered Java class loader designed for delayed, in-memory activation rather than immediate interactive webshell use.
Jun 29, 2026
Public disclosures highlighted multiple high-severity vulnerabilities across industrial control systems, open-source software, and consumer networking gear, with several issues enabling **unauthenticated remote compromise**. Johnson Controls disclosed **CVE-2025-26385** (CVSS 10.0), a critical SQL injection affecting multiple building/ICS management products (including *ADS/ADX, LCS8500, NAE8500, SCT, CCT*) that can allow remote, unauthenticated attackers to execute arbitrary SQL to alter/delete/exfiltrate data; CISA guidance emphasized isolating control system networks from the internet, segmentation, and controlled remote access (e.g., VPNs). Additional unauthenticated remote issues include **CVE-2026-25069** in *SunFounder Pironman Dashboard* (path traversal in log API endpoints enabling arbitrary file read/deletion) and **CVE-2025-51958** in the *DokuWiki* `runcommand` plugin (unauthenticated command execution via `lib/plugins/runcommand/postaction.php`). Other disclosures include developer-tooling and application-layer injection flaws and multiple router memory-corruption bugs with public exploit references. *Orval* fixed **CVE-2026-25141**, a code-injection issue where incomplete escaping can be bypassed using **JSFuck**-style payloads, and *Cybersecurity AI (CAI)* addressed **CVE-2026-25130**, where `subprocess.Popen(..., shell=True)` enables argument/command injection leading to RCE (notably via the `find_file()` tool). Data-layer issues include **CVE-2025-69662** in *geopandas* (`to_postgis()` SQL injection) and **CVE-2026-24854** in *ChurchCRM* (authenticated SQL injection via `PerID` in `/PaddleNumEditor.php`, patched in 6.7.2), while **CVE-2025-36384** affects *IBM Db2 for Windows* (local privilege escalation via unquoted search path). SOHO router flaws **CVE-2026-1686** (*Totolink A3600R*) and **CVE-2026-1637** (*Tenda AC21*) describe remotely reachable buffer/stack overflows with publicly available exploit material, increasing the likelihood of opportunistic exploitation where exposed management interfaces exist.
Jun 29, 2026