Apache Security Advisories - 2026-07-13

Apache Security Advisories — Week of 2026-07-06 to 2026-07-12

Apache Security Advisories - 2026-07-09

netweaver_application_server_abap

Out-of-bounds Write

SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could lead to unauthorized data access, modification, or system unavailability. This has high impact on confidentiality, integrity, and availability of the application.

SAP NetWeaver Application Server ABAP

SAP_SE

SAP NetWeaver Application Server ABAP contains logical errors in memory management that allow memory corruption to occur, potentially resulting in unauthorized data access, modification, or system unavailability.

Github Advisory

Improper Verification of Cryptographic Signature

A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header.
This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.

Opcenter X

Siemens

Opcenter X does not properly validate the algorithm specified in the JSON Web Token (JWT) header, allowing attackers to forge arbitrary JWTs and bypass authentication mechanisms.

Padding Oracle Crypto Attack

Signature Spoofing by Improper Validation

servicenow

Improper Control of Generation of Code ('Code Injection')

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform.


ServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners.




Further, the vulnerability is addressed in the listed patches and family releases, which have been made available to hosted and self-hosted customers, as well as partners. We are not currently aware of exploitation against ServiceNow instances.




We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

ServiceNow AI Platform

Servicenow

ServiceNow AI platform vulnerability that enables remote code execution within the ServiceNow platform.

Code Injection

Leverage Executable Code in Non-Executable Files

Manipulating User-Controlled Variables

wordpress

The Library Management System WordPress plugin before 3.5.8 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection and extract arbitrary data from the database, including user password hashes.

Library Management System

owthub

Unknown

The Library Management System WordPress plugin before version 3.5.8 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing SQL injection attacks that enable extraction of arbitrary data from the database, including user password hashes.

tumbleweed

UNIX Symbolic Link (Symlink) Following

Improper Link Resolution Before File Access ('Link Following')

A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root.






This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1.

openSUSE Tumbleweed

SUSE

A UNIX Symbolic Link (Symlink) Following vulnerability in the suricata package allows privilege escalation from the suricata user to root.

Leveraging Race Conditions via Symbolic Links

youtrack

Missing Authentication for Critical Function

In JetBrains YouTrack before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

YouTrack

JetBrains

In JetBrains YouTrack before versions 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429, an authentication bypass vulnerability exists via direct database access that allows attackers to obtain administrative access to the system.

Choosing Message Identifier

Force the System to Reset Values

Using Unpublished Interfaces

Cross Site Request Forgery

Use of Incorrect Operator

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text.

DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the is_matched method, <= was evaluated using Perl's ge operator, and >= was evaluated using Perl's le operator.

SQL::Nano is the fallback query engine for DBI's file-backed drivers (DBD::File, DBD::DBM, CSV-style drivers) whenever SQL::Statement is not installed, and is forced whenever DBI_SQL_NANO=1. Queries over such tables use these predicates directly.

The impact depends on the context. Where an application relies on a WHERE clause to filter file-backed data for policy or authorization, an inverted <=/>= comparison silently returns the wrong rows.

DBI::SQL::Nano

HMBRAND

Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI.  NOTE: some of these details are obtained from third party information.

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router. The vulnerabilities exist in two endpoints: the /level/15/exec/- URI handling "show privilege" commands, and the /level/15/exec/-/configure/http URI handling "alias exec" commands.

Search CVEs by ID

Trending vulnerabilities

Latest security advisories

Apache Security Advisories - 2026-07-13: 2 critical vulnerabilities amid 6 CVEs

Apache Security Advisories — Week of 2026-07-06 to 2026-07-12: 10 critical vulnerabilities amid 32 CVEs

Apache Security Advisories - 2026-07-09: 3 critical vulnerabilities amid 8 CVEs

Browse

Be the first to know about critical vulnerabilities