Daily Digest
No CISA KEV-confirmed database vulnerabilities were reported today; the single most urgent item is PostgreSQL CVE-2026-82039 (CVSS 8.8 HIGH), an authenticated SQL injection in UTMStack that allows attackers to execute arbitrary SQL with DBA privileges via the searchGroupsByFilter endpoint, enabling full database read/write and potential filesystem access.
Summary: SQL injection in the Restaurant-Management-System's User/cancel.php via unsanitized ID parameter passed to mysqli_query; remotely exploitable without authentication.
Affected Features / Interoperability: Web application order cancellation component; direct database manipulation/read via the injection point.
Source: https://github.com/AdithyaYelloju/Restaurant-Management-System/, https://vuldb.com/cve/CVE-2026-103231, https://vuldb.com/submit/955080, https://vuldb.com/vuln/411924
Actions:
Summary: Authenticated SQL injection in UTMStack UtmAssetGroupService.searchQueryBuilder() via assetType/groupName values inserted unsanitized into a native PostgreSQL query; exploitable through GET /api/utm-asset-groups/searchGroupsByFilter.
Affected Features / Interoperability: UTMStack asset group search API; could allow full database read/modification and filesystem access via DBA privileges.
Source: https://github.com/UTMStack/UTMStack/releases/tag/v11.2.16, https://github.com/utmstack/UTMStack/commit/4e7a727c3b8d8e2ad020d3b4f982a6d085dbecdd, https://www.vulncheck.com/advisories/utmstack-sql-injection-via-searchgroupsbyfilter
Actions:
Summary: postgresql-operator charm's postgres_exporter writes the monitoring user's password in cleartext to logs on database connection errors.
Affected Features / Interoperability: Prometheus monitoring integration; any log reader can recover pg_monitor read-only credentials.
Source: https://github.com/canonical/postgresql-operator/security/advisories/GHSA-rcx7-7rh5-r542
Actions:
Summary: Blind SQL injection in YesWiki {{newtextsearch}} action via unsanitized Bazar list option ids concatenated into SQL REGEXP/LIKE clauses; exploitable anonymously.
Affected Features / Interoperability: YesWiki Bazar list search; can leak admin password hashes from yeswiki_users table.
Source: https://github.com/YesWiki/yeswiki/security/advisories/GHSA-4333-x9p4-8xj7, https://www.vulncheck.com/advisories/yeswiki-before-4.6.7-unauthenticated-blind-sql-injection-via-newtextsearch
Actions:
Unverified chatter — not authoritative, separate from Formal Vulnerabilities above.
MySQL
Oracle Database
Microsoft SQL Server
No CISA KEV-confirmed entries appear in today's Cloud Security feed; the single most urgent item is CVE-2026-104859 (Nx @nx/docker command injection) because it allows arbitrary command execution and cloud registry credential exposure during CI/CD releases, even though it lacks a CVSS score.
Summary: OpenRun GitOps platform before 0.17.7 allows open redirect attacks by bypassing redirect URL restrictions; attackers can trigger redirects, though authentication requirements are not specified in the source.
Affected Features / Interoperability: OpenRun redirect handling for deploying web apps/internal tools to Docker/Kubernetes; could break redirect-based auth or callback flows.
Source: https://github.com/openrundev/openrun/commit/709da784fcf1311c85f30f3542cfa3601a78bbf0, https://github.com/openrundev/openrun/releases/tag/v0.17.7, https://github.com/openrundev/openrun/security/advisories/GHSA-h5g6-xmh4-hc37
Actions:
Summary: Nx @nx/docker release pipeline interpolates untrusted config values into shell commands run during `nx release version` or `nx release publish`, allowing command injection as the release job's privileges and exposure of registry credentials/cloud tokens; dry-run does not prevent the vulnerable pre-check.
Affected Features / Interoperability: Nx Docker release pipeline (docker tag, image lookup, push); CI/CD credentials, cloud tokens, registry integrity.
Source: https://github.com/nrwl/nx/commit/6d60eed061f050e0d5af509a1f5a07c707f09865, https://github.com/nrwl/nx/commit/b587441fd8da28c5db37edb0826554e0060dc81b, https://github.com/nrwl/nx/pull/36505, https://github.com/nrwl/nx/security/advisories/GHSA-6vc5-vf29-ffr2
Actions:
Summary: OpenRun GitOps platform before 0.17.7 allows open redirect attacks by bypassing redirect URL restrictions; attackers can trigger redirects, though authentication requirements are not specified in the source.
Affected Features / Interoperability: OpenRun redirect handling for deploying web apps/internal tools to Docker/Kubernetes; could break redirect-based auth or callback flows.
Source: https://github.com/openrundev/openrun/commit/709da784fcf1311c85f30f3542cfa3601a78bbf0, https://github.com/openrundev/openrun/releases/tag/v0.17.7, https://github.com/openrundev/openrun/security/advisories/GHSA-h5g6-xmh4-hc37
Actions:
Summary: Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when scanning untrusted input (e.g., third-party PRs), potentially exposing sensitive data values in scan output.
Affected Features / Interoperability: Trivy misconfiguration scanning of Terraform files; scan output integrity and sensitive data exposure.
Source: https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md, https://github.com/aquasecurity/trivy/commit/9d91b888cf63023e9c09b64259a4c1cea8dfe993, https://github.com/aquasecurity/trivy/pull/10664, https://github.com/aquasecurity/trivy/security/advisories/GHSA-87hp-4m93-274g
Actions:
Unverified chatter — separate from Formal Vulnerabilities above.
AWS
Microsoft Azure
Kubernetes
-