An authenticated PHP Object Injection vulnerability in the Fluent Forms Pro Add On Pack plugin for WordPress (versions ≤6.2.6) allows a user with Subscriber-level privileges to inject a malicious serialized PHP object via deserialization of untrusted input. If a suitable POP chain is present and the user update integration is enabled with a mapped user meta field, the attacker can change user passwords and ultimately take over administrator accounts. Public exploit code is available, but the EPSS score (0.38%) suggests low real-world exploitation probability and the vulnerability is not listed in CISA's KEV.
Use-after-free in the Linux kernel's net/sched cls_api when handling TC_ACT_CONSUMED in tcf_qevent_handle can allow remote code execution. The flaw is triggered if a RED qdisc is configured with a qevent early_drop and a tc filter using connection tracking (act_ct) with defragmentation enabled while receiving out-of-order fragments. No active exploitation or public PoC exists; EPSS score 0.17% indicates low exploitation probability despite a CVSS 9.8 base score.
Command injection in NoteGen before 0.32.0 allows remote code execution when an attacker can execute JavaScript in the application webview. The default Tauri shell plugin capability permits execution of bash, python, and python3 with arbitrary arguments, enabling the webview to run OS commands with the app's privileges, typically leading to full host compromise via cross-site scripting.
Cross-site scripting in NoteGen before 0.32.0 allows malicious AI model responses to execute arbitrary JavaScript in the privileged Tauri webview. The application renders chat output with markdown-it configured to allow raw HTML and injects it unsanitized via dangerouslySetInnerHTML, so an attacker who controls the model prompt (e.g., through a weaponized skill file) can trigger script execution when the user views the response. No active exploitation is known, but a public proof of concept is available, and the vulnerability has a high severity CVSS score of 8.1.
Path traversal vulnerability in Microsoft Edge (Chromium-based) permits a remote, unauthenticated attacker to disclose arbitrary file contents to an external party. The attack requires user interaction, such as visiting a malicious website, and can lead to exposure of sensitive files accessible to the browser process. The vendor has released a patch, but no public exploit or active exploitation is currently known.
Remote code execution in datamodel-code-generator prior to version 0.70.0 allows attackers who control input schemas to execute arbitrary Python code. By supplying a malicious customBasePath value containing embedded newlines and dot-free expressions, an attacker can inject code that executes when the generated module is imported. A patch is available in version 0.70.0; no public exploit is known at this time.
Information disclosure in Microsoft Edge (Chromium-based) stems from an origin validation error, allowing a network-based attacker to read sensitive data. The vulnerability requires user interaction (e.g., visiting a malicious website) to trigger a cross-origin leak, potentially exposing data across different security contexts. A patch is available via Microsoft's update guide; no active exploitation or public exploit has been reported at this time.
Information disclosure in perwendel Spark (SparkJava) up to version 2.9.4 via symlink following in the staticFiles.externalLocation method allows remote attackers with low privileges to read arbitrary files from the server. Publicly available exploit code exists, but no active exploitation or CISA KEV listing has been confirmed. The project maintainer has not yet responded to the issue report.
Information disclosure in mf-yang openclaw-cn up to version 0.2.1 allows remote authenticated attackers with low privileges to leak sensitive data by supplying a crafted URL to the scheme handler. Public exploit code is available, though no active exploitation has been confirmed by CISA KEV.
Server-side request forgery in openclaw-cn up to version 0.2.1 via the Browser Control HTTP API enables authenticated remote attackers to manipulate server-side requests, potentially accessing internal resources. Public exploit code is available in the project's GitHub issue tracker, but no active exploitation has been confirmed through CISA KEV. The vulnerability affects deployments where the browser control API is exposed, requiring low-privilege access to exploit.
Improper authorization in nanocoai NanoClaw's add_mcp_server endpoint allows authenticated attackers with low privileges to bypass access controls and perform unauthorized actions, such as adding MCP servers without proper authorization. Versions up to and including 2.0.64 are affected, and publicly available exploit code exists. A vendor patch is available via commit e5b928783d5c485637565eb07d2967922dfbf8d8.
Improper authorization in NanoClaw's MCP Server Approval component allows local attackers to bypass security controls by manipulating the createChatSdkBridge.setup function. The vulnerability affects all versions up to 2.0.64, and a public exploit is available, although no active exploitation or CISA KEV inclusion has been confirmed.
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows remote attackers to bypass origin validation, enabling them to trick users into believing they are interacting with a trusted website. The flaw, tracked as CVE-2026-57978, affects all pre-patch versions of Edge and can be exploited via a malicious site with user interaction. No active exploitation or public exploit code has been identified, and Microsoft has released a patch.
We need to analyze the provided data for CVE-2026-17432 and synthesize a JSON output per the instructions. First, extract relevant info: - CVE ID: CVE-2026-17432 - Description: Vulnerability in NousResearch hermes-agent 2026.6.5, in file hermes-agent/plugins/platforms/simplex/adapter.py, component SimpleX Gateway Authorization. Manipulation of argument contactId results in improper access controls. Attack may be launched remotely, high complexity, difficult exploitation. Exploit is public, patch available. Patch identified as commit 490c486ff65b766d9de0fe0e6f26e1778aaa8fb3. CVSS Score 1.3, vector CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/R:X/V:X/RE:X/U:X - CWE: CWE-284 (Improper Access Control) - EPSS: 0.23%, percentile 14% -> low exploitation probability. - KEV: not mentioned, so not in KEV -> no active exploitation. Tags include "Authentication Bypass, Hermes Agent" - POC/Exploit: Publicly available (tag says exploit public, references include exploit URL) - Patch: Available from vendor (patch commit and PR) - Reported by: VulDB - CPE: cpe:2.3:a:nousresearch:hermes-agent:*:*:*:*:*:*:*:* -> vulnerable versions all, but description and EUVD mention version 2026.6.5 specifically? EUVD affected versions: ["hermes-agent 2026.6.5"] - ENISA EUVD ID: EUVD-2026-49046 - References: multiple vuldb pages, github issues, PR diff, commit. The PR diff provides crucial technical details: the vulnerability is in the SimpleX Gateway Authorization mechanism. The adapter.py originally used both user_id (contactId) and source.user_name (the contact's self-asserted profile display name) for authorization allowlist. This allowed an attacker to rename their profile to an allowlisted value and gain unauthorized access. The fix changes to use source.user_id_alt (local display name) instead of source.user_name, which is stable and not attacker-controlled. This is essentially an