{"generated_at":"2026-10-23T22:06:03.771Z","count":7,"incidents":[{"id":"metabase-sql-injection-vulnerability-cve-2026-72898","url":"https://pwned.coffee/i/metabase-sql-injection-vulnerability-cve-2026-72898","title":"Metabase SQL Injection Vulnerability","summary":"Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance.","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"past","exploited":true,"public_poc":true,"kev_due":"2026-08-14","do":null,"affected":"Metabase Metabase","fixed_versions":[],"ids":["CVE-2026-72898"],"stack":["selfhost-apps"],"first_seen":"2026-08-11T12:00:00.000Z","updated_at":"2026-08-11T12:00:00.000Z"},{"id":"zammad-gmbh-zammad-improper-privilege-management-vulnerability","url":"https://pwned.coffee/i/zammad-gmbh-zammad-improper-privilege-management-vulnerability","title":"Zammad GmbH Zammad Improper Privilege Management Vulnerability","summary":"Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. Added to CISA KEV on 2026-10-02 (federal deadline 2026-10-05).","severity":"critical","brew":{"name":"Hell brew","temp":"540°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"past","exploited":true,"public_poc":true,"kev_due":"2026-10-05","do":null,"affected":"Zammad GmbH Zammad","fixed_versions":[],"ids":["CVE-2026-102489","CVE-2026-102490"],"stack":["selfhost-apps"],"first_seen":"2026-10-02T12:00:00.000Z","updated_at":"2026-10-02T12:00:00.000Z"},{"id":"ahsay-ahsaycbs-command-injection-vulnerability","url":"https://pwned.coffee/i/ahsay-ahsaycbs-command-injection-vulnerability","title":"Ahsay AhsayCBS Command Injection Vulnerability","summary":"Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.","severity":"critical","brew":{"name":"Hell brew","temp":"540°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"past","exploited":true,"public_poc":true,"kev_due":"2026-10-17","do":null,"affected":"Ahsay AhsayCBS","fixed_versions":[],"ids":["CVE-2026-105133","CVE-2026-105134"],"stack":["selfhost-apps"],"first_seen":"2026-10-14T12:00:00.000Z","updated_at":"2026-10-14T12:00:00.000Z"},{"id":"kiloview-e3-ndi-encoder-vulnerabilities","url":"https://pwned.coffee/i/kiloview-e3-ndi-encoder-vulnerabilities","title":"Kiloview E3 NDI Encoder Vulnerabilities","summary":"Successful exploitation of vulnerabilities in Kiloview E3 NDI Encoder could allow an attacker to fully compromise the device, affecting firmware versions <1.30.","severity":"critical","brew":{"name":"Hell brew","temp":"540°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"live","exploited":true,"public_poc":false,"kev_due":null,"do":null,"affected":"Kiloview E3 NDI Encoder","fixed_versions":["1.30"],"ids":["CVE-2026-105265","CVE-2026-107861","CVE-2026-109122","CVE-2026-110243","CVE-2026-110491","CVE-2026-110825","CVE-2026-111100","CVE-2026-92450","CVE-2026-96616"],"stack":["selfhost-apps"],"first_seen":"2026-10-22T12:00:00.000Z","updated_at":"2026-10-22T12:00:00.000Z"},{"id":"n8n-improper-control-of-dynamically-managed-code-resourc-cve-2025-68613","url":"https://pwned.coffee/i/n8n-improper-control-of-dynamically-managed-code-resourc-cve-2025-68613","title":"n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","summary":"n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution. Added to CISA KEV on 2026-03-11 (federal deadline 2026-03-25).","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"past","exploited":true,"public_poc":true,"kev_due":null,"do":null,"affected":"n8n n8n","fixed_versions":[],"ids":["CVE-2025-68613"],"stack":["selfhost-apps"],"first_seen":"2026-03-11T12:00:00.000Z","updated_at":"2026-03-11T12:00:00.000Z"},{"id":"gogs-path-traversal-vulnerability-cve-2025-8110","url":"https://pwned.coffee/i/gogs-path-traversal-vulnerability-cve-2025-8110","title":"Gogs Path Traversal Vulnerability","summary":"Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution. Added to CISA KEV on 2026-01-12 (federal deadline 2026-02-02).","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"patched","bucket":"fix","kitchen":{"name":"Order up","plain":"Fix available"},"status":"past","exploited":true,"public_poc":true,"kev_due":null,"do":null,"affected":"Gogs Gogs","fixed_versions":[],"ids":["CVE-2025-8110"],"stack":["selfhost-apps"],"first_seen":"2026-01-12T12:00:00.000Z","updated_at":"2026-01-12T12:00:00.000Z"},{"id":"gpac-mp4box-heap-use-after-free-cve-2025-60490","url":"https://pwned.coffee/i/gpac-mp4box-heap-use-after-free-cve-2025-60490","title":"GPAC/MP4Box Heap Use-After-Free","summary":"GPAC/MP4Box has a heap use-after-free vulnerability in gf_filter_pid_send_event_downstream, allowing attackers to execute arbitrary code.","severity":"high","brew":{"name":"Double espresso","temp":"355°C"},"patch_status":"unknown","bucket":"unknown","kitchen":{"name":"On hold","plain":"Status unknown"},"status":"live","exploited":false,"public_poc":false,"kev_due":null,"do":"Restrict use of GPAC/MP4Box on untrusted files and watch for a vendor fix.","affected":"GPAC/MP4Box","fixed_versions":[],"ids":["CVE-2025-60490","CVE-2025-60491"],"stack":["selfhost-apps"],"first_seen":"2026-10-23T13:35:37.000Z","updated_at":"2026-10-23T13:35:37.000Z"}]}