Unauthenticated arbitrary blob creation in Chatwoot before 4.16.0 lets remote attackers abuse the ActiveStorage direct-uploads controller, which lacks authentication (CWE-306), to resolve any tenant's account and conversation and obtain signed PUT URLs for writing attacker-controlled data into the shared storage backend. The flaw affects all self-hosted and multi-tenant Chatwoot deployments prior to 4.16.0, is reported by VulnCheck, and has publicly available exploit code exists (no CISA KEV listing). The CVSS 4.0 vector emphasizes integrity impact (VI:H) with a secondary availability effect (VA:L) and no confidentiality loss.
Unauthenticated arbitrary file read in Microweber CMS through version 2.0.20 lets remote attackers retrieve sensitive files via directory traversal in the static file controller (ServeStaticFileContoller). Because the controller trusts the attacker-controlled ?path= query input over the bound route segment and normalize_path() fails to strip traversal sequences, a single unauthenticated HTTP GET can disclose environment configuration files containing credentials and other system files. Publicly available exploit code exists; the flaw was reported by VulnCheck and carries a CVSS 4.0 base score of 8.7.
Unauthenticated arbitrary file read in Meshery before 1.0.57 lets remote attackers retrieve any file on the host by abusing the /api/system/fileView and /api/system/fileDownload endpoints, which pass a user-controlled file parameter straight to os.Open with no path validation. Reported by VulnCheck and fixed in v1.0.57, it carries a CVSS 4.0 score of 8.7 and requires no authentication or user interaction; no public exploit identified at time of analysis, though the fix commit publicly reveals the exact vulnerable code path.
Arbitrary file write and unauthorized file read in Vanna (the open-source AI SQL agent) through version 2.0.2 allows unauthenticated remote attackers to escape the FileSystemConversationStore base directory by injecting path traversal sequences into the conversation_id parameter of the chat API. Because the affected endpoints require no authentication, an attacker can write attacker-controlled JSON to arbitrary filesystem locations and read conversation metadata from outside the intended store - publicly available exploit code exists and the flaw was reported by VulnCheck. No CISA KEV listing is present, so there is no public exploit identified as being actively used in the wild.
Denial of service in Amazon's aws-smithy-http-server Rust crate (versions prior to 0.66.5) lets remote unauthenticated attackers exhaust server sockets and async tasks by opening many connections and trickling partial requests that never complete. The default serve() path ships without connection read/header timeouts or a concurrent-connection cap, so a classic slowloris-style flood can hang the service indefinitely. No public exploit has been identified at time of analysis, though the technique is well-understood and the CVSS 4.0 base score is 8.7 (High).
Argument injection in the AWS Bedrock AgentCore Python SDK before 1.18.1 lets a remote authenticated user run arbitrary commands inside the Code Interpreter sandbox by embedding shell/argument delimiters in package names passed to install_packages(). Because the CVSS vector is PR:L, an attacker needs some level of authenticated access and the flaw requires user interaction (UI:A) with a high confidentiality and integrity impact (CVSS 4.0 base 8.4). There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Server-side request forgery in PHPOffice PhpSpreadsheet (>= 4.0.0 through 5.8.0, plus older branches back to 2.0.0) lets an attacker bypass the WEBSERVICE() domain whitelist introduced in 5.4.0 by chaining through an HTTP 302/301 redirect. Because the whitelist only validates the initial URL host while file_get_contents() silently follows redirects without re-validation, an attacker who can upload a crafted XLSX to an app that calls setDomainWhiteList() and getCalculatedValue() can pivot to internal-only targets and read the full HTTP response (up to 32,767 bytes) as a cell value. Publicly available exploit code exists (a full PoC and lab reproduction are in the GitHub advisory); no public exploit identified as actively used in the wild and it is not in CISA KEV.
Denial of service in PhpSpreadsheet (PHPOffice) versions 2.0.0 through 5.8.0 lets remote unauthenticated attackers crash a PHP worker with a ~1 KiB malformed XLS/OLE file. The library's OLERead::read() follows attacker-controlled OLE sector chains without cycle detection, so a sector that points back to itself makes the small-block depot loop append the same data until memory is exhausted. It is triggered during automatic format detection via Reader\Xls::canRead(), so any app that probes untrusted spreadsheet uploads is affected; a working proof of concept is published in the vendor advisory, though the flaw is not in CISA KEV.
Denial-of-service in PhpSpreadsheet's Gnumeric reader lets remote attackers crash PHP worker processes by uploading a tiny gzip-compressed .gnumeric file that decompresses to hundreds of megabytes. The reader's Gnumeric::canRead() calls gzdecode() with no decompressed-size cap during routine file-type detection, so a ~98 KB payload expanding to ~96 MiB exhausts a 64M memory limit and triggers a fatal error before validation. No public exploit is identified at time of analysis, but a working proof-of-concept is described in the advisory and the CVSS score is 7.5 (High) with A:H impact.
Arbitrary .docx read and write in Office-Word-MCP-Server (gongrzhe) through version 1.1.11 lets an attacker who can influence the filename argument passed to the document tools escape the intended working directory using absolute paths or ../ sequences. Because the exposed open/save operations run in an MCP tool context, a malicious or prompt-injected instruction can read sensitive .docx files or create and overwrite documents anywhere the server process has filesystem access. Publicly available exploit code exists (VulnCheck), but there is no public exploit identified as actively used and it is not on CISA KEV.
Denial of service in the brace-expansion Node.js library (through version 5.0.7) lets remote attackers crash a process via memory exhaustion by supplying a short crafted string to expand(). The expand() function capped the result count (default 100,000) but not per-result length, so chaining brace groups keeps the count legal while each string grows unbounded; roughly 7.5 KB of input ('{a,b}'.repeat(1500)) triggers a fatal, uncatchable out-of-memory crash in a default Node.js process. Because the library is reached transitively through minimatch and glob, any app that feeds attacker-influenced strings into brace pattern matching is exposed. There is no CISA KEV entry, but the fix commit and README publish a working proof-of-concept trigger string.
Two-factor authentication bypass in the Security Ninja Premium WordPress plugin (all versions before 5.290) lets a remote attacker who already knows a valid account password log in without supplying the one-time code, defeating enforced 2FA for any user including administrators. One of the plugin's two 2FA code paths never validates the second factor, so the protection can be silently skipped. Publicly available exploit code exists (published by WPScan) and a vendor patch is available; EPSS is low at 0.25% (17th percentile), indicating no evidence of widespread automated exploitation despite the POC.
Broken access control in the Praison AI SEO WordPress plugin before 5.0.7 lets unauthenticated attackers reach several REST API routes that lack authorization checks, allowing them to alter the permalink of any published post and to read the plugin's stored configuration data. WPScan reported the issue and publicly available exploit code exists, though EPSS remains low at 0.19% and it is not on CISA KEV. Exposure of configuration data (potentially including AI-service API keys and SEO settings) plus silent permalink tampering can break site links and SEO ranking with no login required.
Security-policy bypass in the awslabs AWS API MCP Server (versions 0.2.13 through 1.3.46) lets an actor invoke AWS API operations that the operator's configured policy was meant to deny or gate. If the policy-enforcement data fails to initialize at startup, the server continues running with all policy checks silently disabled for the entire life of the process, so deny/gate rules are never applied. There is no public exploit identified at time of analysis and it is not on CISA KEV; the flaw's real-world impact is bounded because the IAM permissions on the configured credentials still apply.
Out-of-bounds heap read in PyTorch torchvision's native GIF decoder (versions through 0.28.0) lets attackers who supply a malicious or truncated GIF trigger a segmentation-fault denial of service or leak adjacent heap memory. The flaw sits in the libgif read_from_tensor callback, which passes an unclamped length to memcpy. A public exploit and reproducer exist and an upstream fix is available (commit 4e05dc2), but there is no public exploit identified in the sense of confirmed active exploitation - it is not on CISA KEV. Applications that decode untrusted GIFs via torchvision are affected.
Denial-of-service in MZ Automation's lib60870, an open-source IEC 60870-5-101/104 telecontrol protocol library used in ICS/SCADA systems, allows remote attackers to crash the message-parsing process via a malformed protocol frame that triggers an out-of-bounds read (CWE-125). The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) indicates unauthenticated network exploitation with high availability impact and limited confidentiality exposure. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Denial of service in MZ Automation's libiec61850 library allows remote unauthenticated attackers to corrupt memory by sending a crafted Read Request, triggering a stack-based buffer overflow (CWE-121). The flaw affects the IEC 61850 MMS server implementation used in power-grid and industrial automation devices, and was disclosed via a CISA ICS advisory (ICSA-26-204-06). No public exploit is identified at time of analysis, and the vendor CVSS 4.0 vector scores only availability impact, indicating a service crash rather than confirmed code execution.
Denial of service in MZ Automation's libiec61850 library allows a network-adjacent attacker to crash an IEC 61850 MMS server by sending a specially crafted WriteRequest whose listOfData field is empty, triggering a NULL pointer dereference (CWE-476) in the Write Named Variable List handler. Any device or application embedding the affected library as an MMS server - commonly protection relays, RTUs, gateways, and SCADA front-ends in electric-power and industrial environments - is exposed. Reported through CISA ICS-CERT (advisory ICSA-26-204-06) with no public exploit identified at time of analysis and no CISA KEV listing.
Cleartext credential exposure in Pronetiqs IntraVUE (Panduit IntraVUE) versions 3.2.1a14 and prior allows an attacker to retrieve stored passwords in plaintext via the product's API, because credentials are never hashed or encrypted at rest. This industrial-network visualization tool is affected across all builds up to and including 3.2.1a14, and per the CVSS 4.0 vector the disclosure is reachable over the network without authentication (VC:H). There is no public exploit identified at time of analysis, and it is not listed in CISA KEV, but the ICS-CERT advisory (ICSA-26-204-04) confirms the flaw.
Deserialization of untrusted data in Johnson Controls victor video management software (versions 2.9 up to but not including 3.0) on Windows allows an adjacent-network attacker to trigger object injection (CAPEC-586) and achieve high impact on confidentiality, integrity, and availability. The CVSS 4.0 vector (AV:A/PR:N/UI:N) indicates unauthenticated exploitation is possible for an attacker positioned on the same local network segment, with no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Credential theft in Pronetiqs/Panduit IntraVUE (versions 3.2.1a14 and prior) stems from the use of a cryptographically weak password hash, allowing an attacker who obtains the stored or transmitted hash to recover or replay administrator credentials via a pass-the-hash attack. The flaw affects the IntraVUE industrial network visualization platform and can yield full administrative access to the console. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the vulnerability was coordinated through CISA ICS-CERT (advisory ICSA-26-204-04).
Server-Side Request Forgery in Johnson Controls CCure 9000 and the victor application server (versions 2.9 through 3.0) allows a high-privileged authenticated attacker to coerce the server into issuing crafted requests to internal or external systems. Exploitation can expose internal network resources and pivot into otherwise unreachable back-end services, with high confidentiality impact and a scope change that affects downstream systems. This is a vendor-reported (jci) issue with no public exploit identified at time of analysis and no CISA KEV listing.
Privilege management weakness in Johnson Controls victor Web (video management client) on Windows lets a high-privileged, authenticated actor abuse improper privilege controls (CWE-269 / CAPEC-233) to access information beyond its authorization boundary, with the impact crossing into a subsequent system component. It affects all victor Web releases before 7.1 and is fixed in 7.1. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the CVSS 4.0 base score is 7.1 with high attack complexity and a required attack condition, indicating exploitation is non-trivial.
Denial of service in MZ Automation's libiec61850 lets a network-adjacent attacker crash any application subscribing to GOOSE traffic by transmitting a single crafted L2 GOOSE or R-GOOSE frame carrying a malformed TLV. Because the fault lives in the shared parser used by both the Layer-2 and routable variants, both transport modes are affected, and successful exploitation produces a NULL pointer dereference that terminates the subscriber process. No public exploit identified at time of analysis and the issue is not listed in CISA KEV; the CVSS 4.0 base score is 7.1 with availability-only impact.
Remote code execution in Microsoft Surface Management Services exposes networks to exploitation by authenticated low-privilege users who can send malformed input over the network to trigger arbitrary code execution. Affecting all tracked versions per CPE cpe:2.3:a:microsoft:surface_management_services:*:*:*:*:*:*:*:*, the vulnerability carries a CVSS 8.8 High rating with full confidentiality, integrity, and availability impact. No public exploits identified at time of analysis and EPSS at 0.71% suggests low current exploitation probability; the vulnerability is absent from the CISA KEV catalog.
Privilege elevation via server-side request forgery affects Microsoft Azure AI Search, allowing an already-authorized, low-privileged attacker to coerce the service into making crafted network requests to internal or restricted endpoints. By abusing this SSRF, an attacker can reach backend resources and metadata services normally unreachable from their privilege tier, resulting in high confidentiality, integrity, and availability impact (CVSS 8.8). No public exploit identified at time of analysis, and the EPSS score of 0.38% (31st percentile) alongside a CISA SSVC 'Exploitation: none' rating indicates no observed exploitation yet.
Remote code execution in the Blink rendering engine of Google Chrome versions prior to 150.0.7871.186 allows an attacker to run arbitrary code inside Chrome's sandbox when a victim visits a crafted HTML page. The vulnerability has a high CVSS score (8.8) but a low EPSS exploitation probability (0.30%), and no active exploitation has been observed (CISA KEV not listed). A vendor patch is available.
Remote code execution inside a sandbox in Google Chrome prior to 150.0.7871.186 allows attackers to execute arbitrary code via a crafted HTML page. This use-after-free vulnerability requires user interaction and has a high CVSS score but low real-world exploitation probability (EPSS 0.30%). No active exploitation or public exploit code has been identified.
Authorization bypass in Zalando Skipper (all versions through 0.27.25) lets remote unauthenticated attackers evade Open Policy Agent body-content authorization by padding a request past the configured maxBodyBytes limit. Because Skipper forwards the oversized payload upstream while handing OPA an empty parsed_body, deny-on-presence Rego policies fail open and forbidden actions execute. This is an incomplete fix for CVE-2026-50197; publicly available exploit code exists (docker-compose PoC in the GHSA advisory), but there is no public evidence of active exploitation and no code-level fix - v0.27.26 only adds documentation.
Out-of-bounds write in Google Chrome's Codecs component allows remote unauthenticated attackers to potentially escape the browser sandbox and compromise the system via a crafted HTML page. The vulnerability affects Chrome versions before 150.0.7871.186. No active exploitation or public exploit is known, but prompt patching is essential given the high impact.
Authentication bypass in the odh-dashboard web console of Red Hat OpenShift AI (RHOAI) lets a low-privileged actor already inside the cluster impersonate any user — including cluster administrators — by supplying an arbitrary access token to a component that was incorrectly bound to a reachable network interface. Because the impersonated identity is honored against the Kubernetes API, this escalates to arbitrary code execution, privilege escalation, and information disclosure across the cluster. There is no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS score was provided, but the CVSS 8.8 (High) rating and full C/I/A impact make it a serious internal-threat priority.
Privilege escalation via Cross-Site Request Forgery affects the WPO365 | Login plugin for WordPress (versions up to and including 43.2), where an unauthenticated attacker who tricks a logged-in administrator into clicking a crafted link can overwrite arbitrary plugin options and seize control of the site. The root cause is that the AJAX settings handler's nonce check is gated behind an 'enable_nonce_check' option that is absent from the default configuration, so it silently evaluates to false and no CSRF protection runs. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the technical write-up from Wordfence is detailed enough to make reproduction straightforward, and the 8.8 CVSS reflects the full-takeover potential.
Unauthorized database updates can be triggered via CSRF in the GeoIP extension for Joomla, affecting versions 1.0.0 through 6.3.8. An attacker can trick a logged-in Joomla administrator into submitting a request that performs unauthorized database modifications, potentially compromising all data confidentiality, integrity, and availability. EPSS indicates a low 0.13% exploitation probability, and no active exploitation or public exploit is known at this time.
Remote code execution in Bold Reports Standalone Report Designer before 14.1.12 lets authenticated users abuse the file-upload feature to write files outside the intended directory via a crafted filename, ultimately running arbitrary commands with high privileges on the host. The flaw chains a CWE-22 path traversal into server-side command execution, and per the CVSS 4.0 vector requires only low privileges with no user interaction over the network. No public exploit identified at time of analysis, though a VulnCheck advisory documents the issue.
Privilege escalation in the WP BASE Booking WordPress plugin (versions 6.3.1 and earlier) lets a low-privileged authenticated Subscriber elevate their permissions to a higher-privileged role. Because the CVSS vector is AV:N/PR:L with high confidentiality, integrity, and availability impact, an attacker holding any low-level account - trivially obtained on sites with open registration - can gain administrative-level control over the booking system and potentially the wider WordPress instance. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Cross-Site Request Forgery in the ApusListing WordPress theme (versions 1.2.63 and earlier) lets a remote, unauthenticated attacker forge privileged state-changing requests that a logged-in victim's browser executes, chaining into a broken-authentication condition that can lead to account or session compromise. Reported by Patchstack and rated CVSS 8.8, exploitation requires tricking an authenticated user into visiting attacker-controlled content (UI:R). There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation in the MDJM Event Management (Mobile DJ Manager) plugin for WordPress through version 1.7.8.4 lets attackers grant arbitrary MDJM capabilities to any registered role and pivot a low-privileged account up to Administrator. The flaw stems from a role-manipulation endpoint wired to the public WordPress init hook with no authentication gate, no nonce verification, and no allow-list validation of submitted roles. No public exploit identified at time of analysis, but the issue was reported by Wordfence and carries a CVSS of 8.8.
Privilege escalation in Grav's API Plugin before 1.0.10 lets an authenticated caller holding only the api.users.write scope create invitation records that assign the invited account to groups granting api.super, so when the invite is accepted the new account inherits full super-admin API access the inviter never possessed. The flaw stems from InvitationsController::create() failing to validate the attacker-supplied groups field. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Cross-tenant privilege abuse in CyberPanel through 1.9.1 lets any authenticated panel user read, delete, or restore other tenants' incremental backups by supplying a guessed IncJob integer ID that the IncBackups handlers never re-scope to the caller's own domain. The flaw affects the deleteBackup, fetchRestorePoints, and restorePoint endpoints; because IncJob IDs are globally sequential, an attacker can trivially enumerate victims, and unauthorized restores execute with root privileges. No public exploit identified at time of analysis, but the root cause and fix are fully disclosed in vendor commit b198460.
Predictable cryptographic randomness in Silicon Labs' Matter implementation for the SiWx917 wireless SoC allows attackers to reconstruct DRBG output because an entropy-initialization bug seeds the deterministic random bit generator with a predictable value, so every device produces the same stream of 'random' numbers. Any keys, nonces, or session material derived from this generator in the affected Matter code are therefore guessable, undermining confidentiality of secured communications on affected devices. The issue was found only after the repository was deprecated; no public exploit identified at time of analysis and it is not in CISA KEV.
Unauthenticated order and payment forgery in JoomShaper's EasyStore extension for Joomla (versions 1.0.0 through 2.0.1) lets remote attackers manipulate the payment and order state of arbitrary orders because critical fields such as order status and payment status are trusted from client-supplied input. An unauthenticated actor can mark unpaid orders as paid or otherwise tamper with order lifecycle states, undermining transaction integrity for any store using the extension. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, but the CVSS 4.0 base score of 8.7 (high/critical) and network, no-auth, no-interaction vector make this a high-priority integrity flaw.
Remote code execution in Grav CMS (>= 1.7.0, < 2.0.9) allows any authenticated user holding create or update permission on any Flex-based directory to run arbitrary shell commands on the server. FlexDirectory::dynamicDataField() resolves blueprint data-*@: directives through call_user_func_array() while checking only is_callable(), so dangerous functions like exec, system, passthru, and shell_exec are never blocked. This re-opens the same class of flaw that GHSA-fj2p-qj2f-74v5 patched in Blueprint::dynamicData() (2.0.7), because the FlexDirectory handler bypasses that fix. No public exploit identified at time of analysis, though the issue was reported by VulnCheck with a dedicated advisory.
Unauthorized file access in JetBrains IntelliJ IDEA before 2026.2 allows remote attackers to read files they should not be able to reach during a Remote Development session, bypassing intended authorization controls (CWE-862). The high CVSS score (8.6) reflects a scope-changed confidentiality impact, meaning the exposure can extend beyond the vulnerable component to the host system serving the remote session. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Arbitrary code execution in JetBrains PyCharm before 2026.1.4 and 2026.2 lets an attacker who supplies a crafted project achieve code execution when a victim opens that untrusted project in the IDE. PyCharm auto-selects or trusts a Python executable bundled or referenced by the project, so merely opening the malicious project runs attacker-controlled code with the user's privileges. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the reporter is JetBrains itself and a vendor patch is available.
SQL injection in the Visualizer WordPress plugin (versions 4.0.6 and earlier) allows an authenticated user holding only Contributor-level privileges to inject arbitrary SQL into backend database queries, enabling extraction of sensitive data such as user credentials and secrets. Reported by Patchstack and tracked under CWE-89, the flaw carries a CVSS 8.5 (scope-changed) rating; no public exploit identified at time of analysis, and it is not listed in CISA KEV. The low privilege bar (Contributor is a common, low-trust role on multi-author sites) makes this a meaningful risk for any site that grants untrusted users content-contribution access.
SQL injection in the Create by Mediavine (Mediavine Create) WordPress recipe plugin through version 2.5.3 allows authenticated users holding at least Contributor-level privileges to inject arbitrary SQL into backend database queries (CWE-89). Successful exploitation exposes the full WordPress database - including user credentials, secret keys, and site content - and the CVSS 3.1 scope-changed vector (S:C) indicates impact beyond the plugin's own security context. No public exploit has been identified at time of analysis and the CVE is not listed in CISA KEV; EPSS data was not provided.
Heap out-of-bounds write in FFmpeg's TDSC video decoder (versions 2.7 through 8.1.2) lets a remote attacker corrupt heap memory and potentially achieve code execution when a victim opens or transcodes a crafted AVI file whose frame dimensions change across TDSF frames. The flaw carries a CVSS 4.0 base score of 8.5 with high confidentiality, integrity, and availability impact, and requires the target to process the malicious file (UI:P). No public exploit identified at time of analysis, and it is not listed in CISA KEV; it was reported by VulnCheck.
OS command injection in gpsd's gpsprof profiling utility (through release-3.27.5) lets an attacker who controls GPS input inject shell commands via the SKY.satellites[].used field. The value is written unsanitized into a gnuplot heredoc, so a crafted used value containing the heredoc terminator EOD closes the data block early and appends gnuplot system() calls that execute as the user running gpsprof in polar mode. No public exploit identified at time of analysis; the flaw is code-execution class (CWE-94) with a CVSS 4.0 base score of 8.5.
Heap out-of-bounds write in FFmpeg's vf_swaprect video filter (versions 3.0 through 8.1.2) lets an attacker corrupt heap memory by getting the library to process a crafted NV12 video frame with odd width, causing an 18-byte copy into a 17-byte buffer. Successful exploitation causes at minimum a process crash and potentially arbitrary code execution in the context of the application embedding FFmpeg. Reported by VulnCheck with an upstream fix committed; there is no public exploit identified at time of analysis and it is not on CISA KEV.
Authenticated SQL injection in the Quiz And Survey Master WordPress plugin (versions 11.2.0 and earlier) lets a low-privileged Contributor-level user inject arbitrary SQL through the plugin's quiz/survey handling, exposing the entire WordPress database. The CVSS 3.1 base score is 8.5 with a scope change, reflecting that a single low-trust account can read data across the whole database rather than just plugin-scoped tables. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.