Forwarded from TWCERTCC Cybersecurity Alert TWCERTCC-200-202609-00000009

【CVE-2026-82078】PaperCut NG/MF Unsafe Reflection Vulnerability (CVSS v3.1: 9.1)
【Whether exploited by ransomware: Unknown】PaperCut NG/MF contains an Unsafe Reflection vulnerability, which may allow an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode located on the application classpath within the security context of the PaperCut server process.

【CVE-2026-81578】PaperCut NG/MF Missing Authentication for Critical Function Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】PaperCut NG/MF contains a Missing Authentication for Critical Function vulnerability, which allows an unauthenticated remote attacker to modify specific system configurations.

【CVE-2026-59822】BerriAI LiteLLM Improper Authentication Vulnerability (CVSS v3.1: 8.2)
【Whether exploited by ransomware: Unknown】The MCP Streamable HTTP endpoint in BerriAI LiteLLM contains an Improper Authentication vulnerability, which may allow an unauthenticated attacker to use an arbitrary Bearer token to establish an authenticated MCP session.

【CVE-2026-48710】Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CVSS v3.1: 6.5)
【Whether exploited by ransomware: Unknown】Kludex Starlette contains an HTTP Request/Response Smuggling vulnerability, which may allow an attacker to inject a path into the Host field and place it before the actual path. When the system's authentication mechanism relies on the reconstructed URL path, this may result in issues such as authentication bypass.

【CVE-2026-49869】Kestra OSS OS Command Injection Vulnerability (CVSS v3.1: 10.0)
【Whether exploited by ransomware: Unknown】Kestra OSS contains an OS Command Injection vulnerability, which may allow an unauthenticated remote attacker to create and execute arbitrary workflows without requiring credentials.

【CVE-2026-82329】JFrog Artifactory Improper Authentication Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】JFrog Artifactory contains an Improper Authentication vulnerability. Under the default configuration, an unauthenticated attacker with network access may be able to obtain administrator privileges.

【CVE-2026-9586】Sangoma Switchvox SQL Injection Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Sangoma Switchvox contains an SQL Injection vulnerability, which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database by sending a single specially crafted request, including performing database operations and remote code execution.

【CVE-2026-83548】SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CVSS v3.1: 10.0)
【Whether exploited by ransomware: Unknown】SonicWall SMA1000 Appliances contain a Server-Side Request Forgery vulnerability, which may allow an unauthenticated remote attacker to gain unauthorized access to sensitive functions and perform unauthorized operations.

【CVE-2026-83549】SonicWall SMA1000 Appliances OS Command Injection Vulnerability (CVSS v3.1: 7.8)
【Whether exploited by ransomware: Unknown】SonicWall SMA1000 Appliances contain an OS Command Injection vulnerability, which may allow an authenticated remote attacker with administrator privileges to execute arbitrary operating system commands, thereby resulting in remote code execution.

【CVE-2026-85046】Google Chromium V8 Type Confusion Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】Google Chromium V8 contains a Type Confusion vulnerability. A remote attacker may execute arbitrary code within the sandbox through a specially crafted HTML webpage. This vulnerability may affect multiple Chromium-based web browsers, including but not limited to Google Chrome, Microsoft Edge, and Opera.