HIGHVulnerability
Verified
Global

CISA KEV: Ray-Project Ray — Ray-Project Ray Code Injection Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

Analysis

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-18. Remediation due: 2026-08-21.

Indicators of Compromise (1)

CVE (1)
CVE-2025-62593
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 18, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-97670 — The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization b...

The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the notification email_message [field] placeholder and the {action_hook,...} dynamic-data toke

CVE-2026-97670
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-103889 — The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable t...

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no sanitization of the xpv_image POST parameter before it is echoed unescaped into a Dompdf-rendered HTML template w

CVE-2026-103889
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-94589 — The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirect...

The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension, MIME type, and size validation in the signature field's validation_filter(), combined with the absence of PHP-execution guards in the upload

CVE-2026-94589
NIST NVD