Azure SQL scores a perfect 10.0, GeoTools ships a textbook SQLi, and UFO gets DNS-rebound

A remote attacker can inject and run arbitrary shell commands through the BOSH CLI tool on Windows. This is a command injection bug, meaning crafted input gets passed to a shell without proper sanitization. CVSS 7.5, and while there's no known exploitation in the wild yet, EPSS puts it at the 75th percentile for exploit probability.

Affected estate

Cloud Foundry operators using the BOSH CLI on Windows

How to check

Run `bosh --version` on your Windows jumpboxes or CI runners to confirm the installed version.

Included because

remote; command injection; common deployment tool; CVSS 7.5; elevated EPSS percentile

Action

Upgrade BOSH CLI to the latest release that patches this command injection.

Why it matters

Command injection on your BOSH CLI host could let an attacker pivot into your Cloud Foundry control plane.

Source

Cloud Foundry advisory

An unauthenticated attacker can crash your Unleash server by sending a deeply nested JSON payload (around 10 KB) to any OpenAPI-validated endpoint like /edge/validate. The Node.js process hits a stack overflow, terminates, and doesn't recover on its own. Replaying the request keeps the service down indefinitely.

Affected estate

Teams self-hosting Unleash feature flag servers prior to versions 7.5.2, 7.6.5, or 8.0.2

How to check

Check the Unleash version in your deployment config, container image tag, or the /health or /internal-backstage/health endpoint response.

Included because

unauthenticated; internet-facing; denial of service with sustained outage; no recovery without restart

Action

Upgrade to Unleash 7.5.2, 7.6.5, or 8.0.2.

Why it matters

A single unauthenticated request can take down your feature flag service, which likely gates functionality across all your apps.

Source

Unleash project advisory (GitHub)

This is a server-side request forgery (SSRF) bug in Azure SQL Database that lets an unauthenticated attacker escalate privileges over the network. Microsoft scored it a perfect CVSS 10.0. Details are sparse, but a network-accessible SSRF that leads to privilege escalation in a managed database service is about as bad as it gets.

Affected estate

Anyone running Azure SQL Database

How to check

Check the Azure Service Health dashboard and the Microsoft Security Response Center (MSRC) portal for advisory status and whether your instances are patched.

Included because

unauthenticated; network-accessible; CVSS 10.0; privilege escalation; cloud-managed service

Action

Verify via the Azure portal that your Azure SQL Database instances have received the fix. Tighten firewall rules and virtual network service endpoints to limit network exposure.

Why it matters

CVSS 10.0 SSRF with privilege escalation could expose your entire database to an unauthenticated attacker over the network.

Source

Microsoft Security Response Center (MSRC)

The UFO framework's MCP HTTP server binds to localhost:8010 but doesn't validate Host, Origin, or Sec-Fetch-Site headers. An attacker can use DNS rebinding from a malicious web page to reach the local /mcp endpoint, list available tools, and run OS commands or read files as your user. All they need is for you to visit a page they control while the UFO MCP server is running.

Affected estate

Developers and researchers running Microsoft's UFO automation framework prior to version 3.0.8

How to check

Check the UFO version in your project dependencies or repository tag. Verify whether port 8010 is listening with `netstat -tlnp | grep 8010` (Linux) or `netstat -ano | findstr 8010` (Windows).

Included because

DNS rebinding bypasses localhost trust; command execution; CVSS 8.8; requires only a browser visit to trigger

Action

Upgrade UFO to 3.0.8. If the server must stay running before you patch, restrict port 8010 at the host firewall.

Why it matters

A DNS rebinding attack from any browser session can turn into local command execution as your user, with no additional authentication needed beyond the API key.

Source

Microsoft UFO project advisory (GitHub)