SQL injection in n8n's Oracle Database node allows attackers to inject arbitrary SQL commands through the Limit field when user-controlled input is passed via expressions, enabling data exfiltration from connected Oracle databases. Exploitation requires a specific workflow configuration where external input (e.g., from webhooks) reaches the Limit field; authentication depends on the webhook's access controls. The vulnerability affects n8n versions prior to 1.123.32, 2.17.4, and 2.18.1, and vendor-released patches are available.
Unauthorized post content disclosure in the Complianz - GDPR/CCPA Cookie Consent WordPress plugin (all versions up to and including 7.4.5) allows unauthenticated remote attackers to read consent-area block content from private, draft, and unpublished posts via a REST API endpoint that bypasses all access controls. The root cause is CWE-862 (Missing Authorization): the endpoint registers WordPress's built-in `__return_true` as its permission callback, unconditionally permitting all callers regardless of authentication or capability. Real-world exploitation probability is very low (EPSS 0.03%, 10th percentile), no public exploit has been identified, and the SSVC assessment confirms no observed exploitation - though the attack is trivially automatable against any site running the plugin.
SQL injection in n8n Snowflake and legacy MySQL v1 nodes allows authenticated users with workflow creation permissions to execute arbitrary SQL against connected databases by injecting malicious table names, column names, or update keys via expression inputs. This vulnerability affects n8n versions before 1.123.32, 2.17.4, and 2.18.1; successful exploitation enables data exfiltration, modification, or deletion. The flaw represents an incomplete fix to a prior SQL injection vulnerability (GHSA-f3f2-mcxc-pwjx) that already patched MySQL, PostgreSQL, and SQL Server nodes but overlooked the Snowflake node and legacy MySQL v1 implementation.
Sensitive system information in the BetterDocs WordPress knowledge base plugin (WPDeveloper, all versions through 4.3.10) is exposed to unauthenticated remote attackers via CWE-497, enabling retrieval of embedded sensitive data without credentials. Reported by Patchstack and tracked as EUVD-2026-26215, this medium-severity finding carries an EPSS of 0.03% (8th percentile) with no public exploit code or active exploitation recorded at time of analysis. The SSVC framework confirms no known exploitation but flags the attack as automatable, making it a viable target for mass WordPress plugin scanning campaigns.
Missing authorization in GiveWP (StellarWP's WordPress donation plugin) versions through 4.14.5 permits unauthenticated remote attackers to access restricted functionality due to incorrectly configured access control levels, resulting in partial information disclosure. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms no authentication or special conditions are required, and the SSVC framework rates the attack as automatable - meaning mass scanning is trivially feasible if a public exploit emerges. No public exploit or active exploitation has been identified at time of analysis; EPSS places exploitation probability at just 0.03% (8th percentile), indicating low current real-world risk despite the accessible attack surface.
Memory exhaustion in OpenTelemetry.Exporter.OneCollector (NuGet, versions <= 1.15.0) enables denial-of-service against .NET applications when the configured telemetry collector endpoint is attacker-controlled or susceptible to MitM interception. The `HttpJsonPostTransport` class reads the full HTTP response body into heap memory on any 4xx or 5xx error - with no byte cap - allowing a malicious or intercepted endpoint to send an arbitrarily large body that exhausts heap memory, stalls the garbage collector, or triggers an OutOfMemoryException that terminates the process. No public exploit code exists and EPSS is 0.02% (3rd percentile), consistent with the high attack complexity; however, the impact on availability is rated High by the CVSS vector.
Admidio 5.0.8 and earlier allows authenticated administrators to remove all other administrators from the system via Role::stopMembership(), which lacks a minimum-administrator-count validation check. Two colluding or compromised admin accounts can sequentially remove each other, leaving zero administrators and locking administrative access. The vulnerability requires high privileges (PR:H) and user interaction (UI:R) but results in complete denial of administrative access once exploited.
Open redirect vulnerability in n8n's MCP OAuth consent flow allows unauthenticated attackers to register arbitrary redirect URIs and silently redirect users to attacker-controlled URLs when they deny OAuth consent. The `/mcp-oauth/register` endpoint lacks authentication and the `handleDeny` handler does not validate redirect destinations, enabling phishing attacks via crafted links. CVSS 4.7 (network-accessible, requires user interaction). Patches available: versions 1.123.32, 2.17.4, and 2.18.1 or later.
Stored cross-site scripting in Helpy 2.8.0 allows any registered user to persist arbitrary HTML in their account display name, which renders unescaped across three distinct surfaces: public forum threads, the admin ticket view, and HTML notification emails sent to other users. The multi-surface persistence is the key risk amplifier - a single malicious account name can target both end-users and privileged administrators without further action by the attacker. No active exploitation is confirmed (SSVC: none; EPSS: 0.05%), making this a medium-priority issue requiring a registered attacker account and victim interaction.
Stack-based buffer overflow in SonicWall SonicOS enables authenticated remote attackers with high-privilege credentials to crash the firewall, producing a complete denial-of-service condition across multiple SonicOS release trains. Affected deployments span SonicOS 6.5.x, 7.0.x, 7.3.x, and 8.1.x builds per ENISA EUVD-2026-26256 and SonicWall advisory SNWLID-2026-0004. No public exploit code has been identified and CISA SSVC classifies exploitation as none, placing this at lower operational priority despite the network-accessible attack vector.
Admidio 5.0.8 and earlier allows user managers with rol_edit_user permission to bypass multi-tenant organization isolation and retrieve complete member directories across all organizations by directly calling the contacts_data.php endpoint with mem_show_filter=3, exploiting a permission check mismatch between the frontend UI (which correctly requires isAdministrator() and contacts_show_all setting) and the backend API endpoint (which only requires the weaker isAdministratorUsers() check). Affected data includes full names, email addresses, login names, UUIDs, and all configured profile fields from unauthorized organizations. This is confirmed actively exploited vulnerability with patch available in version 5.0.9.
Stored cross-site scripting in Helpy 2.8.0's knowledge base Doc rendering logic allows authenticated admin or agent editor accounts to persist arbitrary JavaScript in Doc body fields, which then executes silently in the browsers of any user who views the affected page. The vulnerability is confirmed in version 2.8.0 per CPE cpe:2.3:a:helpy.io:helpy:2.8.0 and the Fluid Attacks advisory (EUVD-2026-26245). No active exploitation has been identified - EPSS sits at 0.04% (13th percentile) and CISA KEV lists no known threat actor activity - but the stored nature of the payload means a single injection persists for all subsequent victims without further attacker interaction.
Insecure default file permissions in the Anthropic TypeScript SDK's `BetaLocalFilesystemMemoryTool` expose persisted agent state to local read access and, in Docker deployments with permissive umasks, enable local users to overwrite memory files and manipulate subsequent model behavior. Affected versions span `@anthropic-ai/sdk` 0.79.0 through 0.91.0; a fix is available in 0.91.1. No public exploit exists and exploitation has not been observed (SSVC: none), with an EPSS score of 0.01% placing this in the 2nd percentile - risk is real but narrowly scoped to shared-host or containerized deployments.
GNU wget2 incorrectly validates TLS server certificates, accepting certificates with improper Key Usage (KU) or Extended Key Usage (EKU) attributes. This allows attackers who have compromised certificates issued for non-server purposes to impersonate legitimate servers in TLS connections, enabling man-in-the-middle attacks that leak sensitive information such as authentication credentials or request/response data.
Content-type validation bypass in AgentFlow's localhost web API allows browser-driven cross-origin requests to reach the POST /api/runs and POST /api/runs/validate control plane endpoints without enforcement of application/json. Affected versions prior to commit 1667fa3 (CPE: cpe:2.3:a:berabuddies:agentflow:*) fail to reject non-JSON content types, enabling a malicious web page visited by a local AgentFlow user to issue CORS-simple requests that bypass the browser's same-origin enforcement and submit pipeline operations to the local agent runtime. No active exploitation is confirmed in CISA KEV; the SSVC framework records a PoC with partial technical impact and non-automatable exploitation.
Path traversal in Admidio's document add mode allows authenticated attackers to register arbitrary server files into document folders via unvalidated `name` parameter, enabling arbitrary file read when combined with CSRF. A low-privileged user can trick a documents administrator into clicking a malicious link to register sensitive files like `install/config.php` (containing database credentials) into a publicly accessible documents folder, then download those files using the attacker's own session. The vulnerability chains insufficient input validation (accepts `../` sequences), missing CSRF protection on the `add` action, and `SameSite=Lax` cookies that permit cross-site GET requests from administrators.
Heap-based buffer underwrite in Wazuh's GetAlertData function (versions 1.0.0 through 4.14.3) allows a threat actor who has already compromised a Wazuh agent to corrupt heap metadata on the manager or agent host by injecting a specially crafted alert into the log file monitored by wazuh-logcollector. The root cause is an unsigned integer underflow combined with pointer arithmetic wrapping that causes a NULL byte write exactly one byte before the start of a strdup-allocated buffer, corrupting adjacent heap metadata. No active exploitation is confirmed (absent from CISA KEV), though SSVC classifies a POC as existing; EPSS at 0.01% (2nd percentile) reflects very low observed exploitation probability, and a vendor-released patch is available in version 4.14.4.
Open redirect in the Jenkins Microsoft Entra ID Plugin (formerly Azure AD Plugin) version 666.v6060de32f87d and earlier allows network-accessible phishing attacks against Jenkins users. The plugin fails to validate the post-login redirect URL, enabling an attacker to craft a legitimate-looking Jenkins authentication link that silently forwards victims to an attacker-controlled site after successful Entra ID login. No active exploitation is confirmed (SSVC: none; EPSS 0.03%, 8th percentile), and the vendor has released a patch per the April 2026 Jenkins security advisory.
Missing authorization (CWE-862) in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows any authenticated user with only Overall/Read permission to force the Jenkins server to initiate outbound connections to an arbitrary attacker-controlled URL using attacker-supplied GitHub App credentials. This SSRF-adjacent capability enables abuse of Jenkins as an unauthorized network proxy and may expose internal network topology to external actors. No public exploit has been identified and CISA has not added this to the KEV catalog; EPSS of 0.03% (7th percentile) and SSVC exploitation status of 'none' confirm low near-term exploitation likelihood, though the low privilege barrier makes it accessible to any credentialed Jenkins user.
Jenkins Script Security Plugin versions up to and including 1399.ve6a_66547f6e1 expose classpath enumeration to any user holding the low-privilege Overall/Read permission due to a missing authorization check (CWE-862). Any authenticated Jenkins user can query pending and approved Script Security classpaths without elevated rights, leaking internal class names, library paths, and approved script configuration useful for targeted reconnaissance. No public exploit exists and EPSS sits at 0.03% (7th percentile), placing this firmly in the low-urgency tier despite its network-reachable vector.
Missing authorization checks in the Spectra (ultimate-addons-for-gutenberg) WordPress plugin by Brainstorm Force allow authenticated low-privileged users to access restricted functionality or data beyond their intended permission level. All versions through 2.19.22 are affected, and the CVSS vector (PR:L, C:L) confirms that exploitation requires an existing authenticated session and yields only limited confidentiality exposure. No public exploit code exists and SSVC classifies exploitation status as none, making this a low-urgency but actionable remediation target for WordPress sites with open user registration.
Cross-Site Request Forgery in the WordPress 'Barcode Scanner with Inventory & Order Manager' plugin (versions up to and including 1.11.0) allows a remote unauthenticated attacker to induce an authenticated WordPress user into performing unintended state-changing actions on the plugin's behalf. Exploitation requires tricking a logged-in user into visiting a crafted page, consistent with the CVSS UI:R designation and SSVC automatable:no classification. No public exploit has been identified at time of analysis, and EPSS places this at the 3rd percentile (0.01%), indicating negligible observed exploitation pressure.
Server-Side Request Forgery in Dell Disk Library for Mainframe (DLm8700 and DLm2700, versions prior to 7.0.1.0) enables a low-privileged remote attacker to coerce the appliance into issuing server-side HTTP requests to arbitrary internal or external resources. The vulnerability is scored CVSS 4.3 Medium and carries an EPSS of 0.01% (1st percentile), reflecting negligible real-world exploitation probability. No public exploit code exists and CISA SSVC assessment confirms no active exploitation and non-automatable attack path.
CSRF in Admidio's preferences module (versions ≤ 5.0.8) enables a remote attacker to trick an authenticated administrator into triggering sensitive server-side operations - database backup generation, .htaccess file overwriting, and test email dispatch - by luring them to a single malicious webpage. These state-changing operations are handled via unprotected GET requests in modules/preferences.php, and SameSite=Lax browser cookie behavior allows session cookies to travel on top-level cross-origin navigations, making exploitation trivial with a JavaScript redirect. A working proof-of-concept is published in the GitHub security advisory; there is no CISA KEV entry and EPSS stands at 0.01%, consistent with opportunistic rather than mass exploitation.
Cache poisoning in Spring Framework's static resource handler allows network-accessible unauthenticated attackers to corrupt the resource cache with wrongly-encoded content, causing a denial of service for clients consuming the front-end. Affected are Spring MVC and Spring WebFlux applications across Spring Framework 5.3.x, 6.1.x, 6.2.x, and 7.0.x that explicitly configure the resource chain with both caching and encoded resource resolution enabled. No public exploit exists and no active exploitation has been identified; EPSS at 0.06% (17th percentile) and SSVC exploitation rating of 'none' confirm very low real-world risk at this time.
Admidio members_assignment_data.php endpoint leaks hidden profile field values through a blind search oracle attack. Role leaders with ROLE_LEADER_MEMBERS_ASSIGN permissions can infer exact values of hidden PII fields (birthdays, street addresses, cities, postal codes, countries) by observing which users appear in search results, despite these fields being suppressed from JSON output. The vulnerability affects Admidio versions up to 5.0.8 and is fixed in 5.0.9.
Stored or reflected cross-site scripting in SourceCodester Pharmacy Sales and Inventory System 1.0 allows remote low-privileged attackers to inject malicious JavaScript via the Name parameter of the Customer function at /index.php?page=customer. A public proof-of-concept exploit is confirmed via GitHub and VulDB, but the CVSS 4.0 score of 2.0 and EPSS of 0.03% (9th percentile) reflect the constrained exploitation conditions: authentication and victim interaction are both required. No KEV listing indicates no confirmed active exploitation at time of analysis.