Summary
A single flaw in a network switch can open the door to an entire enterprise, and today’s Cyware briefing spotlights how multiple zero-day vulnerabilities in D-Link DGS-3130 switches threaten the backbone of business connectivity. Attackers could bypass authentication or exploit buffer overflows to seize control, putting network integrity and uptime at risk for organizations relying on these devices.
A critical bug chain in the ForgeRock identity platform, used by two major automakers, exposed a path from customer records straight to remote vehicle control. By chaining a web application firewall bypass with code execution in the OpenIDM scheduler, attackers could unlock doors or start engines—until a rapid two-hour remediation closed the gap after disclosure.
A single-character change in the HuggingFace admin API URL lets attackers sidestep authentication and trigger sensitive backend jobs, including exporting user conversations and launching compute-intensive database tasks. This flaw, highlighted by v12sec, raises the stakes for privacy and service reliability as repeated exploitation could degrade platform performance.
Top Vulnerabilities Reported in Last 24 hours
Zero-days threaten D-Link enterprise switches
Multiple zero-day vulnerabilities in D-Link DGS-3130 switches could let attackers break into enterprise networks by bypassing authentication or exploiting a buffer overflow to run arbitrary code. In practical terms, a compromise at the switch layer can hand an intruder a foothold for spying, tampering with traffic, or disrupting operations that depend on network uptime. Attack status: No active exploitation has been reported in the provided source, but the report warns the flaws could be leveraged to compromise network integrity and confidentiality. The source does not name a discovering researcher or team.
Impact
Unauthorized access to network infrastructure
Potential data breaches through network interception or lateral movement
Operational disruption if switching or management functions are impaired
Recommended Actions
Apply any available D-Link patches or updates for DGS-3130 switches
Monitor for unusual network activity and unexpected management access
Use network segmentation and access controls to limit blast radius
Identity platform bug chain exposed vehicles
A critical vulnerability chain in the ForgeRock identity platform used by two automakers allowed unauthorized remote access that could extend from customer records to vehicle actions such as lock/unlock doors and start/stop the engine. The attack path described combines bypassing a web application firewall (WAF) using encoded path separators with code execution via the OpenIDM scheduler, ultimately enabling shell access to backend servers. Attack status: The source describes a working exploitation chain; the automakers reportedly remediated it within two hours of disclosure, including rotating affected credentials and removing the proof bundle. Security researcher Sam Curry disclosed the issue, and the automakers are not named.
Impact
Privacy breaches through access to vehicle telemetry and customer data
Unauthorized vehicle control actions that create safety risks
Potential account manipulation affecting legitimate drivers
Recommended Actions
Update ForgeRock/OpenIDM deployments to the latest patched versions available from the vendor
Harden and validate WAF rules against encoded-path and path confusion bypass attempts
Increase monitoring for suspicious scheduler task creation and unexpected administrative activity
HuggingFace admin API bypass abused
A flaw in the HuggingFace admin API reportedly allows unauthorized access to administrative functions by changing a single character in the URL, letting attackers trigger sensitive back-end jobs without authenticating. The affected endpoints described include /admin/export, which aggregates user conversations for export, and /admin/stats/compute, which kicks off concurrent database summarization tasks that normally run on a 24-hour schedule. Attack status: The source describes how an attacker can exploit the bypass to run these actions repeatedly, raising the risk of unauthorized data processing and resource exhaustion, even if exported data is not directly returned to the attacker. The issue was publicly highlighted by v12sec.
Impact
Unauthorized triggering of conversation aggregation and summarization workflows
Potential privacy exposure through unintended data exports or processing
Service degradation from unthrottled, repeated compute tasks
Recommended Actions
Enforce strict authorization checks on all admin endpoints to prevent URL-encoding or path-based bypasses
Add rate limiting and controls to prevent unlimited scheduler/compute task execution
Monitor and log access to administrative endpoints to detect suspicious invocation patterns
Frequently Asked Questions
What is D-Link DGS-3130? Multiple zero-day vulnerabilities in D-Link DGS-3130 switches could let attackers break into enterprise networks by bypassing authentication or exploiting a buffer overflow to run arbitrary code. In practical terms, a compromise at the switch layer can hand an intruder a foothold for spying, tampering with traffic, or disrupting operations that depend on network uptime.
What is ForgeRock? A critical vulnerability chain in the ForgeRock identity platform used by two automakers allowed unauthorized remote access that could extend from customer records to vehicle actions such as lock/unlock doors and start/stop the engine. The attack path described combines bypassing a web application firewall (WAF) using encoded path separators with code execution via the OpenIDM scheduler, ultimately enabling shell access to backend servers.
What is HuggingFace? A flaw in the HuggingFace admin API reportedly allows unauthorized access to administrative functions by changing a single character in the URL, letting attackers trigger sensitive back-end jobs without authenticating. The affected endpoints described include /admin/export, which aggregates user conversations for export, and /admin/stats/compute, which kicks off concurrent database summarization tasks that normally run on a 24-hour schedule.