Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of May 18, 2026

Multiple software products exhibit critical vulnerabilities, exposing systems to various security risks. Stack-based buffer overflows exist in 10-Strike Network Inventory Explorer and Audiograbber, allowing for arbitrary code execution. 10-Strike Network Scanner also has a buffer overflow, enabling code execution. Several products like 10Web Form Maker, SOGo Webmail, and Smartshop are vulnerable to SQL injection, enabling unauthorized data access and manipulation. AWS products, including Amazon Braket SDK and Amazon Redshift connector for Python, have vulnerabilities allowing code execution or data exfiltration. Kiro CLI and RabbitMQ AWS present risks of arbitrary tool execution and file reads, respectively. Typebot.io, a chatbot builder, suffers from multiple vulnerabilities like SSRF and XSS, leading to credential theft and privilege escalation. LiteLLM has privilege escalation vulnerabilities through API key generation and user role modification. A cross-site scripting flaw exists in Basamak DernekWeb, enabling stored XSS attacks. Finally, a vulnerability was found within Besen BS20 EV Charging Station.