View Ridge Security
Back to Cyber Hose

Check Point: Stack Overflow in Security Management and Log Server

A high-severity Check Point stack overflow headlines this run, alongside a CVSS 10.0 MaxKB prompt-injection flaw and multiple Joplin vulnerabilities.

๐Ÿ“‹ ADVISORIES

๐Ÿ”“ CVEs & KEV

  • CVE-2026-77521 โ€” 1Panel-dev MaxKB โ€” CVSS 10.0 โ€” MaxKB: Prompt-injectable agent can lead to command executionMaxKB is an open-...

  • CVE-2026-46649 โ€” laurent22 joplin โ€” CVSS 9.1 โ€” Joplin: SSO Auth Code Login Missing Rate Limiting โ€” 9-Digit Numeric Code Brut...

  • CVE-2026-79916 โ€” 1Panel-dev MaxKB โ€” CVSS 9.1 โ€” MaxKB Authenticated RCE via AWS Credential Injection

  • CVE-2026-55105 โ€” laurent22 joplin โ€” CVSS 7.7 โ€” Joplin: Fountain embeds allow arbitrary script execution in published notes a...

  • CVE-2026-77523 โ€” 1Panel-dev MaxKB โ€” CVSS 7.4 โ€” MaxKB: Cross-workspace model parameter form writeMaxKB is an open-source AI a...

  • CVE-2026-49450 โ€” laurent22 joplin โ€” CVSS 7.1 โ€” Joplin desktop Windows auto-updater accepts signed installer from any publish...

  • CVE-2026-49453 โ€” laurent22 joplin โ€” CVSS 7.0 โ€” Joplin: Path traversal in resource sync โ€” silent arbitrary file write outside...

  • CVE-2026-55179 โ€” laurent22 joplin โ€” CVSS 6.5 โ€” Joplin: Logic error in Joplin Server allows a signed-in user to read any note...

  • CVE-2026-79917 โ€” 1Panel-dev MaxKB โ€” CVSS 6.5 โ€” MaxKB: Chat share-link endpoint missing owner check: a chat token can publish...

  • CVE-2026-79919 โ€” 1Panel-dev MaxKB โ€” CVSS 6.3 โ€” MaxKB function-library sandbox escape: dlopen stack-check bypass via importli...

  • CVE-2026-79918 โ€” 1Panel-dev MaxKB โ€” CVSS 6.3 โ€” MaxKB: Sandbox escape via unhooked fexecveMaxKB is an open-source AI assistan...

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check