Anonymous account takeover in FreeScout help desk before 1.8.224 lets an unauthenticated attacker seize the lowest-id activated agent or administrator account by abusing the public POST /user-setup/{hash}/{invite_sent_at} endpoint. By supplying a single URL-encoded space as the invite hash and a plaintext numeric timestamp, the attacker overwrites the target's email and password and is logged in as that user. No public exploit is identified at time of analysis, but the mechanics are fully disclosed in the GitHub advisory and CVSS is 9.4.
Remote code execution in ktransformers (kvcache-ai) through version 0.6.3 allows unauthenticated attackers to run arbitrary shell commands by sending crafted pickle payloads to the SchedulerServer's ZMQ ROUTER socket, which is bound to all network interfaces (0.0.0.0). The flaw stems from unsafe pickle deserialization of RPC messages, letting an attacker weaponize a malicious __reduce__ method to execute code as the server process. Publicly available exploit code exists and VulnCheck published an advisory; there is no public exploit identified in CISA KEV, so this is not yet confirmed as actively exploited.
Server-Side Request Forgery in the Kirki WordPress plugin before 6.0.12 allows unauthenticated attackers to coerce the server into issuing HTTP requests to arbitrary attacker-chosen hosts because a user-supplied URL is fetched server-side without validation. This is reachable remotely with no authentication or user interaction (CVSS 9.1), publicly available exploit code exists, and a vendor patch has shipped, but there is no public exploit identified as being used in active attacks (not in CISA KEV). Reported by WPScan (EUVD-2026-45889), the flaw is dangerous on WordPress sites hosted in cloud or internal-network environments where the request can pivot to metadata or intranet services.
Unauthenticated file upload in the JDownloads download-manager extension for Joomla allows a remote attacker to place an executable file (e.g. a PHP web shell) on the server and achieve full remote code execution. The flaw affects the JDownloads 4.1 line per the referenced advisory and requires no authentication or user interaction, so any internet-reachable Joomla site running the extension is exposed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the trivial exploitation profile makes it a high-priority patching target.
Unauthenticated file upload in the DJ-Classifieds extension for Joomla allows remote attackers to upload arbitrary files and achieve full remote code execution on the underlying web server, without any authentication or user interaction. The flaw carries a maximum CVSS 4.0 score of 10.0 and is classified as CWE-434 (unrestricted upload of dangerous file types); a third-party technical write-up (mysites.guru) exists, but no public exploit code or CISA KEV listing has been confirmed at the time of analysis. Any Joomla site running this classifieds/listings extension is exposed to complete server compromise.
Information disclosure in FileThingie 2.5.7, a single-file PHP web-based file manager, lets a remote attacker retrieve sensitive information through the ft2.php component. The flaw is documented in a third-party vulnerability-research repository, indicating exploitation details are likely public, though it is not listed in CISA KEV. The published CVSS 9.9 rating overstates impact relative to the description, which describes only information disclosure rather than full compromise.
Eval-based command injection in the Net::DNS module for Perl (versions through 1.55) lets a malicious or man-in-the-middle DNS server run arbitrary shell commands on a client that parses an EDNS EXTENDED-ERROR option. The EXTRA-TEXT field is tokenised and passed to Perl's eval with escaping for $ and @ but not backticks, so a crafted response reaching option('EXTENDED-ERROR') in array context executes attacker-supplied commands. Rated CVSS 9.8; no public exploit identified at time of analysis, though the advisory publishes a working {0:`"<command>"`} payload, EPSS is low at 0.41%, and it is not in CISA KEV.
Remote code execution in Piwigo 16.3.0 and earlier lets an unauthenticated attacker inject arbitrary PHP through the web installer, which writes unsanitized POST parameters (prefix, dbpasswd, dbhost, dbname, dbuser) into local/config/database.inc.php where they execute on every page load. The bug is a PHP 8 regression: the addslashes() guard is gated on get_magic_quotes_gpc(), removed in PHP 8.0, so escaping is silently skipped and raw input reaches PHP source. No public exploit identified at time of analysis, but the flaw is trivially weaponizable when the installer is reachable, yielding full server compromise.
Arbitrary code execution in SJCAM SJ4000-Air action cameras (firmware V1.4C and earlier), and unbranded whitelabel devices built on the same v1.4C firmware, is possible via a maliciously crafted FEX file - the Allwinner firmware/partition configuration format used by these AllwinnerTech-based devices. The flaw is classified as code injection (CWE-94) with a supplied CVSS of 9.8; no public exploit or CISA KEV listing exists at time of analysis, though a detailed reverse-engineering writeup of the device firmware is publicly referenced. The AV:N network rating in the supplied vector is inconsistent with the description's file-processing mechanism and warrants verification.
Authentication bypass in SailPoint IdentityIQ lets an unauthenticated remote attacker reach protected APIs and data because OAuth bearer tokens are improperly validated. The flaw (CWE-287) affects all IdentityIQ versions up to the patched releases 8.5p1, 8.4p4, and 8.3p5, and carries a critical CVSS of 9.8. No public exploit identified at time of analysis and EPSS is low (0.22%), but the total technical impact against an identity-governance platform makes it a high-priority patch.
SQL injection in Apache Syncope allows an administrator holding sufficient entitlements to execute arbitrary SQL through stacked queries by abusing unsanitized sort parameters, affecting the 3.0.x, 4.0.x, and 4.1.x branches up to 3.0.16, 4.0.6, and 4.1.1 respectively. Because stacked queries are supported, an attacker can go beyond data theft to modify or destroy identity data and potentially chain to further backend compromise. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; note the NVD CVSS 9.8 (PR:N) contradicts the vendor description, which explicitly requires an authenticated privileged administrator.
Privilege escalation in Apache Syncope's identity-management engine lets a self-service user grant themselves defined Roles via a single REST API call, effectively promoting a low-privileged or newly self-registered account to administrator. It affects deployments running the all-Java user workflow adapter, or the Flowable adapter with a BPMN definition that does not require admin approval for self-registration or self-update, across versions 3.0.0-M0-3.0.16, 4.0.0-M0-4.0.6, and 4.1.0-M0-4.1.1. The Apache-issued advisory rates it CVSS 9.8; no public exploit identified at time of analysis and it is not on CISA KEV.
Predictable salt generation in Crypt::Password through version 0.28 for Perl weakens the security of stored password hashes by seeding salts with Perl's built-in rand() function, which is not cryptographically secure. An attacker who obtains a password hash database can more easily precompute or predict salts, reducing the cost of offline cracking. There is no public exploit identified at time of analysis, EPSS is low (0.14%, 4th percentile), and CISA SSVC records no observed exploitation.
Use-after-free in Google Chrome desktop versions prior to 150.0.7871.128 allows a remote attacker to corrupt memory and potentially achieve renderer code execution after a victim visits a crafted web page. The flaw carries a critical CVSS 9.6 owing to its network vector, low complexity, and scope-changing impact, though it requires user interaction (loading a malicious page). No public exploit has been identified at time of analysis and the EPSS probability is low (0.23%, 14th percentile).
Remote code execution and information disclosure in Google Chrome desktop before 150.0.7871.128 stems from a use-after-free flaw (CWE-416) that a malicious web page can trigger when a victim simply visits it. The CVSS 3.1 score of 9.6 with a scope change reflects a likely sandbox-boundary crossing, giving an attacker high impact on confidentiality, integrity, and availability. There is no public exploit identified at time of analysis and the EPSS probability is low (0.22%, 12th percentile), but browser use-after-free bugs are a historically favored exploitation target.
Use-after-free memory corruption in Google Chrome for desktop before version 150.0.7871.128 lets a remote attacker corrupt heap memory and potentially achieve code execution or information disclosure after a victim visits an attacker-controlled page. The flaw carries a CVSS 9.6 with a scope change reflecting the browser sandbox boundary, but currently shows no public exploit and a low EPSS probability (0.22%, 12th percentile). It is not listed in CISA KEV, indicating no confirmed active exploitation at time of analysis.
OS command injection in GPT-SoVITS (RVC-Boss) through release 20250606v2pro lets remote unauthenticated attackers run arbitrary commands via the Gradio web UI. The webui.py helper functions for ASR, audio slicing, denoise, and UVR5 vocal separation build shell commands with shell=True and splice user-supplied path textbox values directly into them, so shell metacharacters in a path field are executed by the host. The CVSS 4.0 score is 9.3; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivially triggerable against any exposed instance.
Privilege escalation to remote code execution in dotCMS 21.02 through 26.06.22-03 lets a low-privileged authenticated backend user abuse improper authorization checks in the ToolGroupResource (REST) and RoleAjax (DWR) endpoints to self-assign the administrative layout and self-grant the CMS Administrator role, then upload a crafted OSGi bundle whose BundleActivator runs arbitrary shell commands on the host. The endpoints failed to verify the caller was an admin before honoring layout- and role-assignment requests, so any backend account could bootstrap itself to full administrator. There is no public exploit identified at time of analysis, but an upstream fix (PR #36344) is available and the vendor-supplied CVSS 4.0 score is 9.4 (Critical).
Authentication bypass in Red Hat OpenShift HyperShift (hosted control planes) lets a network-reachable attacker impersonate a Konnectivity agent because the proxy-server's agent-facing listener was configured without --cluster-ca-cert and without token-based agent authentication, so client certificates go unvalidated. Any remote party who can reach the Konnectivity cluster endpoint can register as an unauthenticated agent, join the routing pool, and then proxy, inspect, modify, or drop control-plane-to-node traffic. No public exploit identified at time of analysis; the issue is corrected upstream in openshift/hypershift PR #9031 by adding the missing --cluster-ca-cert flag.
Authentication/authorization bypass in the Balbooa Gridbox extension for Joomla allows an already-authenticated user to escalate to full administrative control of the CMS. CWE-288 indicates the flaw stems from an alternate-path or channel that skips proper authorization checks; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. The vendor-assigned CVSS 4.0 score of 9.4 reflects the total compromise of confidentiality, integrity, and availability that admin takeover implies.
Stored and reflected cross-site scripting in ThemeXpert's JMedia media-manager extension for Joomla lets an attacker upload a malicious SVG file that, because it is served without an X-Content-Type-Options: nosniff header, is interpreted and executed as active script in the context of the site. There is no public exploit identified at time of analysis and the flaw is not on CISA KEV, but the attack is well-understood and trivially reproducible. The supplied CVSS 4.0 base score of 9.4 appears inflated for a script-injection issue, so treat the raw number with caution.
Authenticated arbitrary file upload in the ThemeXpert JMedia media-manager extension for Joomla lets an authenticated privileged user (PR:H) write executable files to the server and achieve remote code execution. Uploads accept executable content and polyglot filenames, and the extension's chmod handling fails to strip execute bits, so a planted file can be directly invoked by the web server. Rated CVSS 4.0 9.4 (Critical); no public exploit identified at time of analysis and it is not listed in CISA KEV.
Denial of service in FreeRDP servers (versions <=3.27.1) allows unauthenticated remote attackers to crash the service by forging a malicious encrypted client random during RDP Standard Security negotiation. Because the server publishes its RSA public key, an attacker can craft a ciphertext whose decrypted plaintext spans the full RSA modulus (up to 256 bytes for RSA-2048), overflowing a fixed 32-byte heap buffer in crypto_rsa_common() by roughly 224 attacker-controlled bytes before any authentication occurs. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; the fix landed in FreeRDP 3.28.0.
Unauthenticated information disclosure in the Network-AI (npm: network-ai) package versions 5.12.2 through 5.13.3 lets remote actors read the ApprovalInbox even when an operator has configured a checkAuth/secret, because the authorization check was never wired into the GET read routes. Exploitation exposes full approval-request content - including pending shell-command strings, file paths, justifications, and risk levels - and a hardcoded Access-Control-Allow-Origin:* header allows any website an operator visits to exfiltrate the same data cross-origin. This is an incomplete fix for GHSA-mxjx-28vx-xjjj; no public exploit is identified at time of analysis and the package is not listed in CISA KEV.
OS command injection in AVideo before version 29.0 allows remote attackers to execute arbitrary commands via the Live plugin's on_publish.php endpoint. The flaw is an incomplete fix for CVE-2026-45578: the execAsync() helper re-wraps already-escaped input inside a double-quoted 'sh -c' invocation, which lets shell command substitution using $() or backticks bypass the escapeshellarg() sanitization entirely. There is no public exploit identified at time of analysis, but the network, no-privilege, no-interaction vector (CVSS 4.0 base 9.3) makes this a high-priority patch for exposed AVideo installations.
Blind SQL injection in Windu CMS 4.1 lets remote attackers inject SQL syntax through the URL path carried in an HTTP header, requiring no authentication per the PR:N vector. Because the vendor (jcd) never responded to CERT-PL disclosure, only version 4.1 is confirmed vulnerable while other releases may also be affected. No public exploit identified at time of analysis and the flaw is not in CISA KEV, but the unauthenticated network-facing nature and CWE-89 root cause make it a high-severity data-exposure risk.
Stored cross-site scripting in Chamilo LMS 1.11.38 and earlier lets any unauthenticated attacker inject persistent JavaScript through the public user registration form, which then executes in an administrator's browser when they review registrations, enabling full admin account takeover. The flaw carries a CVSS 9.3 rating driven by its scope change and high confidentiality/integrity impact; no public exploit is identified at time of analysis, though the vendor GitHub Security Advisory (GHSA-gcjp-f7jm-rrrg) confirms the issue and a fix. Because the injection point is an anonymous, self-service form, mass or opportunistic abuse is realistic once a payload is planted.
Client-side double-free (CWE-415) in FreeRDP's .rdp connection-file parser lets an attacker who tricks a victim into opening a malicious .rdp file corrupt heap memory, potentially leading to a crash or code execution in xfreerdp/sdl-freerdp/wlfreerdp. The flaw is in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c), where a non-owning pointer to the settings-owned MonitorIds array is freed on a strtoul error path without clearing settings->MonitorIds, so freerdp_settings_free() frees the same buffer again at teardown. All 3.x releases through 3.27.1 are affected in the default configuration and it is fixed in 3.28.0; there is no CISA KEV listing and no public exploit identified at time of analysis, and no EPSS score was provided.
Privilege escalation in SurrealDB before v3.1.0 lets unauthenticated attackers hijack the privileges of concurrently-active authenticated sessions via a TOCTOU race condition on the HTTP /rpc endpoint — the primary interface used by all official SurrealDB SDKs. Because concurrent requests share mutable authentication state, an unauthenticated request that races in before the state is cleared executes as the authenticated user, potentially escalating to root. No public exploit is identified at time of analysis, but the flaw is credited by VulnCheck and carries a high CVSS 4.0 score of 9.2.
Privilege escalation and information disclosure in Best Practical's Request Tracker (RT) 6.0.0-6.0.2 and versions before 5.0.10 lets a privileged but non-administrative user harvest other users' authentication credentials - including those of administrators - through the REST 2.0 API and replay them against RT's RSS/iCal feed endpoints to read data as those victims. Because the same credential-exposing request also rotates the tokens, exploitation is destructive: it silently invalidates every previously distributed feed URL across the instance. No public exploit has been identified at time of analysis; the flaw is fixed in RT 5.0.10 and 6.0.3.
Arbitrary file write in pulpcore's FilesystemExport feature allows an authenticated administrator to escape the intended export directory via directory-traversal sequences embedded in a user-controlled relative_path. Because the exported file content is also attacker-supplied (an uploaded artifact), the flaw lets a privileged user plant or overwrite arbitrary files anywhere the Pulp service user can write, enabling service compromise or broader host takeover. Rated CVSS 9.0 and reported by Red Hat, it affects pulpcore as embedded in Ansible Automation Platform 2, Satellite 6, and Red Hat Update Infrastructure 4/5; there is no public exploit identified at time of analysis.
TLS hostname verification bypass in the lettre Rust mailer library (0.10.1 through 0.11.21) exposes users of the boring-tls feature to man-in-the-middle attacks; an inverted boolean caused the default strict configuration to silently disable hostname checking. An on-path attacker holding any chain-valid certificate for any domain can transparently intercept SMTP submission, harvesting PLAIN/LOGIN credentials and full message contents. There is no public exploit identified at time of analysis, but the one-line root cause is visible in the public fix commit, making the flaw trivially understandable; native-tls and rustls backends are not affected.
Authenticated remote code execution in Wazuh's Cluster Distributed API (DAPI) lets any peer holding the shared cluster key coerce the master node into deserializing an attacker-controlled callable (CWE-502) and running it under a forged RBAC context, yielding full manager compromise. Rated CVSS 9.1 and affecting all cluster deployments from 4.0.0 up to the 4.14.5 fix, it combines an overly broad deserialization allowlist with client-controlled authorization to bypass permission checks entirely. SSVC records a proof-of-concept, so publicly available exploit code exists, though EPSS remains low at 0.19% (9th percentile), consistent with a signal that requires possession of the cluster key rather than opportunistic mass exploitation.
Improper access control in the Page Builder CK extension for Joomla (versions 1.0.0 through 3.6.1) allows remote unauthenticated attackers to enumerate and view frontend page list views that should be restricted, effectively bypassing intended authentication on that view. The CVSS 9.1 rating reflects high confidentiality and integrity exposure over the network with no privileges or user interaction, though CISA's SSVC assessment rates the technical impact as only 'partial' and no public exploit has been identified. EPSS is very low (0.13%, 3rd percentile), indicating no observed exploitation activity to date.
Cleartext SFTP credential disclosure in VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 allows any unauthenticated remote attacker to harvest working SFTP logins by simply reading the HTTP responses of three exposed endpoints. The credentials appear whenever SFTP integration has been configured in the application, giving the attacker direct access to the backing SFTP server and whatever clinical or file data it holds. No public exploit or CISA KEV listing exists at time of analysis, but with a 9.0 CVSS and zero authentication required, exploitation is trivial once the endpoints are located.
Stored cross-site scripting in HeyForm's form builder (all versions prior to 3.0.0-rc.7) lets a low-privileged team member persist malicious JavaScript that fires in the browser of a team owner who later views the affected form, yielding full account takeover through privilege escalation. The flaw stems from insufficient sanitization of rich-text/HTML block content, allowing event-handler attributes and dangerous URL protocols to survive serialization. No public exploit has been identified at time of analysis, but the underlying commit (cc97d27) and GHSA advisory clearly document the injection vector, and the CVSS 9.0 rating reflects the high blast radius of hijacking an owner session.
Remote code execution in Apache Syncope's connector subsystem allows an administrator holding sufficient entitlements to run arbitrary Groovy scripts through scripted REST and SQL connectors, escaping the intended sandbox and executing code on the host. It affects Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.6, and 4.1.0-M0 through 4.1.1, and is rooted in improper isolation (CWE-653) of the scripting engine. Although the published CVSS is 9.8, the vendor description states an authenticated privileged administrator is required, and there is no public exploit identified at time of analysis.
Remote code execution in Apache Syncope's workflow engine lets an administrator holding sufficient entitlements run arbitrary Groovy code on the server by importing and starting a malicious BPMN process definition through the REST API. Because Flowable's Groovy scriptTasks execute with no sandbox in affected 3.0.x, 4.0.x, and 4.1.x releases, script code embedded in the process runs directly with the privileges of the Syncope core JVM. No public exploit has been identified at time of analysis and the flaw is not in CISA KEV, but the trivial exploitation path once an entitled admin account is reached makes it a strong candidate for post-compromise abuse and insider misuse.
Groovy sandbox escape in Apache Syncope's Implementations feature lets an administrator holding Implementation entitlements author a malicious Groovy class that runs untrusted code outside the intended security sandbox, effectively achieving arbitrary code execution on the identity-management server. It affects Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.6, and 4.1.0-M0 through 4.1.1. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the published CVSS of 9.8 overstates real-world exposure because the flaw requires a privileged administrator account.
Stack-based buffer overflow in rsyslog's optional mmpstrucdata module allows a remote, unauthenticated attacker to crash the rsyslog process and interrupt log collection, with theoretical code execution on weakly hardened builds. Affected versions span rsyslog 7.5.4 through 8.2605.x; the fix is included in 8.2606.0. No public exploit code or active exploitation has been confirmed, but the crash was independently reproduced over both TCP and UDP on Debian 12 with rsyslog 8.2302.0, and the corrective PR (#6991) was merged publicly before coordinated disclosure completed.