Libbiosig, Tenda, SAIL, PDF XChange, Foxit vulnerabilities

Summary: Cisco Talos disclosed ten vulnerabilities in BioSig libbiosig, nine in the Tenda AC6 Router, eight in the SAIL image decoding library, two in PDF-XChange Editor, and one in Foxit PDF Reader, all of which have been patched by their vendors. The Tenda AC6 findings, affecting firmware V5.0 V02.03.01.110, include a firmware signature validation flaw leading to arbitrary code execution, two unencrypted credential transmission issues, and an authentication bypass in HTTP authentication.
Key Takeaway: Nine flaws in a consumer router sold heavily on Amazon, several reachable by sniffing network traffic or sending crafted packets, put a device that often sits at the edge of a network within reach of an attacker who never needs credentials.

Read the original at Cisco Talos ↗

Topics: Supply Chain & AppSec
Mentions: CVE-2025-24322 CVE-2025-24496 CVE-2025-27129 CVE-2025-27564 CVE-2025-30256 CVE-2025-31143 CVE-2025-31355 CVE-2025-31646 CVE-2025-32010
Related: Kitesurf is now open source Cyber Risks · Nov 13, 2026
Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026
ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026