CVE-2026-32662
Development and test API endpoints are present that mirror production functionality.
CVSS
5.3
Medio
EPSS
0.3%
p24
KEV
—
Exploit Today
7
0-100
Publicado: 3 abr 2026 · Última mod.: 24 jul 2026 · CWE-489
0.3%EPSS · 30 días0.3%
2026-08-142026-09-11
Development and test API endpoints are present that mirror production functionality.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-539529.8 CRÍ—
——0GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE (v3.3.22 and below) allows unauthenticated attackers to create a new administrator account. The application features an automated security control designed to delete the sensitive `admin/setup.php` file post-installation. However, this control is neutralized by a self-exclusion bug within the deletion logic, leaving the setup script accessible for unauthorized account creation even after a legitimate installation is completed. As of time of publication, no known patched versions are available.23hCVE-2026-64858.2 ALT2.2%
——1UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts.2dCVE-2026-775459.0 CRÍ11.8%
——4A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.15dCVE-2026-667875.4 MED15.0%
——5A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with attacker-controlled IP addresses, causing other clusters' lighthouse DNS to redirect legitimate service traffic to malicious endpoints. This enables a remote attacker to conduct transparent Man-in-the-Middle (MITM) attacks on cross-cluster service communications, potentially leading to unauthorized information disclosure and data manipulation.9dCVE-2026-664058.8 ALT20.6%
——6DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products.15dCVE-2026-664037.5 ALT17.0%
——5DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved.15d