Duc Anh Nguyen

**Name of the Vulnerable Software and Affected Versions** UniFi OS Server versions prior to 5.0.8 **Description** An improper access control flaw exists in UniFi OS Server. The issue occurs because nginx evaluates the raw request URI for authentication purposes but performs routing using the normalized URI. This discrepancy allows unauthenticated remote attackers to bypass security controls, access protected endpoints, and execute an exploit chain leading to full root remote code execution (RCE), which is the ability to execute arbitrary commands on the system. This could enable unauthorized reading, modification, or deletion of data and the ability to make unauthorized changes to the system. **Recommendations** Update UniFi OS Server to version 5.0.8.

**Name of the Vulnerable Software and Affected Versions** LibreOffice versions 26.2 through 26.2.2 LibreOffice versions 25.8 through 25.8.6 **Description** An out-of-bounds write occurs when processing crafted OOXML documents that contain mismatched encryption salt parameters. An out-of-bounds write is a memory corruption issue where data is written outside the intended boundary of a buffer, potentially leading to crashes or arbitrary code execution. **Recommendations** Update LibreOffice versions 26.2 through 26.2.2 to version 26.2.3. Update LibreOffice versions 25.8 through 25.8.6 to version 25.8.7.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.4 **Description** A heap overflow exists in the TLS protocol dissector. A remote attacker can exploit this issue by sending malformed packets or malicious capture files, potentially leading to a denial of service or the execution of arbitrary code. In real-world scenarios, attackers may use this to achieve code execution and subsequently pivot laterally across network infrastructure. **Recommendations** Update to version 4.6.5.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 **Description** A crash in the ZigBee protocol dissector allows for a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 **Description** A crash in the RDP protocol dissector allows for denial of service and possible code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 **Description** A crash in the SBC codec can lead to a denial of service and potentially allow for arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.