HPE security advisory (AV26-1144)

VU#685399: PromZard context key code injection leads to remote code execution

Overview The npm library promzard, versions 4.0.0 and earlier, is vulnerable to remote code execution due to direct string interpolation of context object keys, which allows unsanitized JavaScript code injection. Description promzard is a Node.js library designed to automate configuration workflows by evaluating template modules and generating data objects via interactive prompting. The library allows users to provid…

When AI Finds the Bugs: Rethinking Exposure in a Flood of Vulnerabilities

N-able security advisory (AV26-1143)

ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.

ARTEX is an open-source, LLM-driven autonomous penetration-testing framework, and its web console is now deployed at scale on U.S. commercial hosting. Starting from internet-wide scanner telemetry, SOCRadar researchers merged and de-duplicated 1,295 U.S.-hosted candidate instances, re-validated each one, and confirmed 916 live ARTEX-family consoles in a snapshot taken on November 11, 2026. The software was […]