The first crosses Android’s app-isolation boundary without permissions; the second turns a parser disagreement into unauthenticated access to protected backend routes.
Cross-app side channels supply transport state that Android’s permission boundary was expected to keep unavailable.
Android, the mobile operating system used on phones and tablets.
Cross-app TCP connection hijacking and DNS cache poisoning
This leads because an ordinary app with no permissions can contribute to altering another app’s traffic or Android’s shared DNS state when paired with a spoof-capable sender.
The app measures cBPF, IP-options, and port-allocation behavior, relays the inferred state to an off-path node, and lets that node race forged TCP or DNS packets against the legitimate endpoint.
On a Pixel 9, the researchers reported 80–86% success for TCP hijacking and 100% for DNS poisoning under their stated trial conditions.
Those trials do not establish the same results across every Android release, kernel, and router configuration.
Traefik authorizes empty parsed path fields while the backend receives the attacker-controlled opaque target.
Traefik, a reverse proxy and Kubernetes ingress controller commonly deployed at application boundaries.
Unauthenticated access to path-protected or alternate-virtual-host backend resources
Traefik leads even though the impact rank placed Samsung second: Traefik’s ingress-to-impact path is reproduced in public code, while Samsung has not disclosed how an image reaches its decoder, whether interaction is required, or which process executes it.
Go stores the rootless request target in URL.Opaque while leaving the path and authority fields inspected by Traefik empty.
Traefik can consequently approve the request as path / and forward the opaque value to a backend that interprets it as a protected path or another virtual host.
The patch rejects opaque targets at entry and clears URL.Opaque before proxying; fixed releases are available.
The first two fields are unknown because their artifact-acceptance and revocation premises do not apply to this code-path fix.
Samsung Galaxy mobile devices on Android 14–17 that use Samsung's libimagecodec.quram.so image decoder.
The DNG and JPEG paths in libimagecodec.quram.so contain heap overflows that Samsung says can produce remote arbitrary-code execution.
We do not know the cheapest delivery route, whether the victim must interact, or the identity and sandbox of the decoder process.
Samsung’s September bulletin lists fixed software for both flaws.
iOS, Apple’s mobile operating system for iPhone.
IP-options observations and port probing let the app infer enough shared state for the peer to race a forged SYN/ACK.
The result was demonstrated on an iPhone 15 running iOS 26.3.1, but only with a cooperating LAN injector and a new TCP flow lacking effective authentication above TCP.
Apple is working on a source-routing restriction, but no fixed iOS version has shipped.
SonicWall SMA1000 remote-access appliances deployed at enterprise network edges.
The unauthenticated WorkPlace proxy reaches a localhost Erlang service, after which attackers recover directory material and deploy secretsdump.
The downstream chain included SAM and LSA collection and DCSync from domain controllers.
SonicWall identifies fixed SMA1000 builds.
N-able N-central, remote-monitoring and management server software used by managed-service providers to administer downstream endpoints.
Network access to the server is enough to reach code execution, and control of the RMM plane can extend to managed systems where its permissions allow.
Huntress observed a compromised N-central environment but could not tie that incident to this exact flaw after the relevant logs rotated.
N-able says all earlier releases are affected and provides fixed releases.
PAN-OS on Palo Alto Networks PA-Series hardware firewalls; the same flaw produces denial of service rather than root execution on VM-Series.
A management web or dataplane interface is enough to reach the XML-processing out-of-bounds write, and no special configuration is required.
Fixed PAN-OS branches are available, although pre-fix images remain accepted.
JFrog Artifactory, a self-hosted artifact repository used in software build and deployment pipelines.
An unauthenticated endpoint discloses an internal anonymous-user JWT, and missing scope validation lets that token mint administrator authority.
The chain was used to create administrators, execute operating-system commands through a Groovy plugin, and install a persistent Rust backdoor.
JFrog has fixed the token flaws, but the remediation does not establish complete revocation of access or persistence created before upgrade.
AWS Systems Manager Agent, management software running on EC2 instances, on-premises servers, and other managed nodes.
A permitted port-forwarding user can encode a link-local address in a form the agent’s denylist misses, tunnel to metadata, and use the retrieved instance-profile credentials outside the node.
Updated agents canonicalize addresses and add credential endpoints to the denylist.
SonicWall SMA 1000 Series 6210, 7210 and virtual 8200v secure remote-access appliances.
The chain uses the unauthenticated forward proxy to reach a protected AMC command-injection path and run commands as root.
SonicWall also reports active exploitation of the two flaws.
Fixed builds are available, but pre-fix appliance images remain accepted.
Check Point Security Gateways, Security Management Servers and Spark appliances processing Site-to-Site or Remote Access VPN traffic.
The pre-authentication paths involve improper certificate validation and a heap overflow in VPN certificate ASN.1 decoding.
No public exploit or researcher demonstration establishes the terminal execution context, so the code-execution result remains provisional.
Check Point has shipped fixes for both paths.
ConnectWise ScreenConnect Client, remote-support and unattended-access software installed on managed endpoints.
Huntress observed modified clients automatically transfer and execute VBS payloads on newly connected Windows endpoints.
AI applications that screen prompts with a lightweight language model before passing accepted input to a stronger, tool-enabled model.
The technique depends on a weaker model screening text before a stronger model with greater reasoning or tool access processes it.
We do not know how many deployed pipelines use that exact architecture or what downstream actions the bypass makes reachable.
Ubiquiti UniFi OS, the appliance platform used by Cloud Keys, Dream Machines, gateways, NVRs and UniFi OS Server.
Attacker-chosen CRLF sequences cause UniFi OS to misparse the request boundary and skip authentication.
Public material includes a working target, packet captures, and exploit detections.
A patch is reported, but affected and fixed version tables could not be retrieved from the vendor page.
Ivanti Endpoint Manager Mobile, an enterprise mobile-device-management server for iOS, Android, macOS and Windows fleets.
A low-privilege user with network access can invoke an undisclosed operation whose missing authorization check grants EPMM administrator authority.
The vulnerable request or endpoint and a working proof of concept are not public.
Fixed EPMM release lines have been published.
projen, a project-configuration and task-generation framework used on developer systems and CI runners.
Shell metacharacters from configuration values or filenames were copied without escaping into generated task commands that a developer or CI job could later run.
Upgrading projen does not replace already-generated vulnerable task files.
Linux kernel Bluetooth ISO socket handling on systems using LE Audio broadcast or unicast.
Concurrent ISO-listener teardown can leave a child socket linked to a freed parent that later teardown code dereferences and modifies.
That supplies a kernel heap write primitive, but no real-controller reproduction or hardened-kernel control-flow hijack is public.
Linux has published affected and fixed release boundaries.
NETGEAR XR1000, XR1000v2, and XR500 gaming routers, embedded network appliances.
An administrator with an active management session must interact with attacker-controlled content, after which cross-site request forgery submits configuration changes with the administrator’s authority.
NETGEAR lists affected models and fixed firmware releases.
NETGEAR RAX30, RAX35, RAX38, RAX40, and RAXE300 routers, embedded network appliances.
Adjacent-network access is required, and malformed input disables the management interface while leaving core Wi-Fi service operating.
NETGEAR lists affected models and fixed firmware releases.
No new Secure Boot, disk-protection, TPM, attestation, or attacker-reachable bootloader primitive survived the window.
No new zero-click capability was established, but the missing August Android vulnerability rows still prevent a complete exclusion.
The same brief, every morning. One email a day, nothing else.
fullchain.sh follows the day’s disclosures from bug to shell — what each one enables, what it links to, and where the fix left the primitive in place.
Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.