SQL injection in kishan0725's open-source PHP Hospital Management System 4.0 lets attackers manipulate the backend database via the 'fromdate' parameter of /betweendates-detailsreports.php. Because input is concatenated directly into a SQL query, an attacker can read, alter, or destroy patient and hospital records; publicly available exploit code exists (sqlmap-confirmed injection techniques documented in the TaintRadar research repository). EPSS is low (0.14%, 4th percentile) and there is no CISA KEV listing, so this is a proof-of-concept-stage issue rather than confirmed active exploitation.
Remote code execution in the StyleMixThemes Cost Calculator Builder PRO WordPress plugin (versions up to and including 4.0.3) lets unauthenticated attackers run arbitrary PHP on the server by injecting non-word XOR gadgets into the orderDetails[*].originalValue field, which is passed verbatim into a PHP eval() call inside js_to_php(). The only gate is a nonce, but that nonce is printed on every front-end page via wp_head, so any anonymous visitor can retrieve it, effectively removing the authentication barrier. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the CVSS 9.8 rating and trivial nonce bypass make this a high-priority, pre-authentication server-takeover flaw.
Authenticated remote code execution in Axway SecureTransport (all versions prior to 5.5-20260528, confirmed present in 5.5-20260326) allows an administrator to inject Java expressions into mail templates that are evaluated server-side when emails are rendered and sent, resulting in full host compromise. The flaw is a Server-Side Template Injection (CWE-1336) reported by Toreon and fixed by Axway; no public exploit identified at time of analysis, though a technical write-up and vendor advisory exist. Because exploitation requires admin privileges (CVSS 4.0 PR:H), risk is bounded to trusted or compromised administrative accounts despite the 9.4 severity.
Arbitrary file upload in the Balbooa Gridbox page-builder extension for Joomla (versions before 2.20.2) lets an authenticated user upload files of arbitrary type via the extension's file-upload methods, bypassing type restrictions (CWE-434). Uploading executable server-side code (e.g. a PHP web shell) yields authenticated remote code execution, and the vendor rates it CVSS 4.0 9.4 with an 'Attacked' exploit-maturity flag and 'Red' urgency. The impact is materially worse because it chains with CVE-2026-65884, which lets the attacker create the account required to reach the upload feature - collapsing the privilege barrier and effectively enabling attacker-driven RCE. No public exploit is identified at time of analysis, though the CVSS threat metric (E:A) signals the vendor considers exploitation activity present.
CRLF injection in undici's HTTP/1.1 dispatcher enables HTTP header injection and potential request smuggling when applications pass duck-typed blob-like bodies whose type property is populated from untrusted input. Affected are the 6.x branch before 6.28.0, all 7.x releases from 7.0.0 through 7.28.x, and all 8.x releases from 8.0.0 through 8.8.x, when callers use the request, stream, pipeline, or dispatch APIs with hand-rolled blob-shaped objects rather than native Blob instances or the fetch API. An attacker who controls the type value can append arbitrary HTTP headers to the outgoing request, potentially smuggling a second request past an upstream proxy or server. No public exploit identified at time of analysis and KEV status is not confirmed in the provided data.
Easy Appointments WordPress plugin through version 3.12.26 exposes an insecure direct object reference (IDOR) that lets any subscriber-level user overwrite the customer metadata of another user's appointment by reusing a nonce harvested from their own edit form. The shared nonce mechanism provides CSRF protection but no ownership enforcement, so an attacker can target arbitrary appointment IDs without restriction. A publicly available proof-of-concept exists (WPScan), and the vulnerability can be chained into a notification hijack: when an administrator approves an affected appointment with customer notifications enabled, the confirmation email is delivered to the attacker-controlled address rather than the legitimate customer, exposing booking details to an unauthorized party.
Pre-authentication heap buffer overflow in Xlight FTP Server before 3.9.5 lets remote unauthenticated attackers write past a heap buffer by sending a malformed SSH client identification string over any SSH or SFTP connection. The flaw is a logic error in the recv-loop termination condition (an OR used where AN AND is required), triggering before authentication and creating strong potential for remote code execution. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated API access in NASA AMMOS Instrument Toolkit (AIT) Deep Space Network Interface before 2.2.2 lets remote attackers control spacecraft communication sessions with no credentials. Seven Space Link Extension (SLE) interface-manager routes are exposed without any authentication, allowing an attacker to start or stop Deep Space Network sessions, read telemetry frame data, and inject arbitrary frames into active spacecraft links. Reported by VulnCheck and rated CVSS 4.0 9.3; no public exploit is identified at time of analysis, but the missing-auth flaw is trivially reachable over the network.
Missing authentication in NASA-AMMOS AIT-GUI before 2.5.1 lets any unauthenticated network attacker mint a valid session via Sessions.create() and then push arbitrary commands onto the spacecraft command bus through handle_cmd(). Because no credential check gates session creation and no authorization gate sits between session issuance and command dispatch, a remote attacker can issue arbitrary spacecraft commands. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Credential exposure in the Vacron VIN-DS783E-E6 network video/surveillance device lets unauthenticated remote attackers invoke an undocumented hidden function that returns the device administrator credentials, per a TWCERT-coordinated disclosure. Recovering the admin login yields complete takeover of the appliance (login, configuration, and video streams). No public exploit code has been identified at time of analysis, and the CVE is not listed in CISA KEV; no EPSS score was provided in the input.
Remote code execution, denial of service, and data compromise affect a Schneider Electric industrial product exposing a Modbus TCP interface, where improper handling of unusual or exceptional Modbus conditions (CWE-754) lets a network attacker crash the device or run arbitrary code. The CVSS 4.0 base score of 9.3 with a network, no-privilege, no-interaction vector indicates unauthenticated remote exploitation is feasible. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV, but the combination of protocol exposure and full confidentiality/integrity/availability impact makes it a serious OT concern.
Information disclosure in GitLab CE/EE (all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1) allows an authenticated user holding only the Developer role to reach unauthorized information because internal request handling enforces insufficient access controls (CWE-201). Publicly available exploit code exists (referenced HackerOne report #3658324), but there is no public exploit identified as being used in active attacks. With a CVSS of 8.5 driven by a scope-changing confidentiality impact, this is a meaningful privilege/authorization boundary failure rather than a full remote code execution flaw.
Unbounded session growth in MCP Ruby SDK's StreamableHTTPTransport allows unauthenticated remote attackers to exhaust server process memory by repeatedly sending initialize requests. Affected versions prior to 0.23.0 defaulted to no session expiry and no concurrent session cap, meaning each initialize request created a persistent ServerSession object that was never reclaimed without an explicit client DELETE. No public exploit has been identified at time of analysis, and exploitation is not confirmed by CISA KEV, but the attack is trivially automatable given the network-accessible, unauthenticated HTTP endpoint.
Unauthenticated SSRF and secret exfiltration in Flyto Core (flytohub/flyto-core) prior to 2.26.7 lets remote attackers coerce the standalone flyto-verification service into making attacker-directed outbound requests. The service listens on 0.0.0.0:8344 with no authentication and accepts a client-supplied callback_url, then issues an outbound POST carrying the X-Internal-Key: $FLYTO_RUNNER_SECRET header while skipping the target_allowed allowlist, so an attacker can both reach internal-only endpoints and steal the runner secret. Rated CVSS 9.3 (scope-changed). No public exploit identified at time of analysis and it is not listed in CISA KEV, but the fix and root cause are fully documented in the vendor GHSA advisory and patch commit.
Unauthorized disclosure of project import source information in GitLab CE/EE stems from a missing authorization check (CWE-863), allowing unauthenticated remote users to view sensitive metadata about how a project was originally imported. All GitLab installations running versions from 16.6 up to 19.0.4, 19.1.2, and 19.2.0 are affected. A publicly available exploit exists via a disclosed HackerOne report, though no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
Authorization bypass in Google's Agent Development Kit (adk-python) lets an actor who can inject or manipulate events in an agent's session history forge a tool-confirmation response and force execution of tools that were never approved. The human-in-the-loop confirmation gate is defeated because the framework never verified that the confirmed tool was registered to the executing agent, that the tool actually required confirmation, or that the confirmation arguments matched the original tool-call event. No CISA KEV listing and no standalone public exploit were provided, though the CVSS 4.0 vector carries E:P (proof-of-concept exploit maturity); remediation is an upstream commit rather than a tagged release.
Unauthenticated information disclosure in the ShinyStat Analytics WordPress plugin (versions before 1.0.17) exposes non-published WooCommerce product data - including draft, pending, and private listings - via an unprotected REST API endpoint that performs no authorization check. Any internet-accessible WordPress/WooCommerce site running an affected version is vulnerable without credentials or user interaction, consistent with the AV:N/AC:L/PR:N/UI:N CVSS vector. A publicly available proof-of-concept is documented by WPScan; no active exploitation has been confirmed in CISA KEV at time of analysis.
Order integrity bypass in the PayU CommercePro Plugin for WordPress (versions through 3.8.9) enables unauthenticated remote attackers to tamper with WooCommerce order totals, shipping details, and metadata without paying the correct amount. The plugin processes payment-gateway callbacks without verifying the cryptographic signature that PayU issues, meaning any HTTP client can forge a callback and manipulate arbitrary orders. A publicly available proof-of-concept exploit exists per WPScan; no active exploitation has been confirmed in CISA KEV at time of analysis.
Remote code execution in Xlight FTP Server versions before 3.9.5 allows unauthenticated attackers to corrupt stack memory by sending malformed SSH packets once an AES-GCM cipher is negotiated during the SSH/SFTP handshake. An unvalidated length field is passed directly to the GCM decrypt routine, overwriting the stack cookie and saved return address before any authentication occurs, potentially yielding code execution as the FTP service. Reported by VulnCheck; no public exploit has been identified at time of analysis, but the pre-auth, network-reachable nature makes it a high priority.
Remote denial of service in Apache Traffic Server (8.0.0-8.1.9, 9.0.0-9.2.14, 10.0.0-10.1.3) allows unauthenticated attackers to crash the proxy by triggering NULL pointer dereferences and dangling references during TLS and SNI processing. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/A:H) reflects a network-reachable, low-complexity availability impact with no confidentiality or integrity loss. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is Apache-reported and patched in 9.2.15 and 10.1.4.
Embedded malicious JavaScript (a supply-chain backdoor) in VaahCMS 2.0.0-2.3.4 executes attacker-controlled code in any browser that renders the security-OTP Blade email template with JavaScript enabled, reported by VulnCheck and rated CVSS 4.0 9.2. The obfuscated payload opens a WebSocket to a hardcoded command-and-control endpoint, keylogs password fields via a MutationObserver, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the malicious code ships in the product itself, so exposure is inherent to running an affected version.
Arbitrary file read in the Balbooa Gridbox page-builder extension for Joomla (all versions before 2.20.2) lets remote unauthenticated attackers read files outside the intended web root through the extension's photo viewer component. The flaw is a classic path traversal (CWE-22) reachable over the network with no authentication or user interaction, enabling disclosure of configuration files, credentials, and other sensitive server content. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Arbitrary recursive directory deletion in the Gridbox extension for Joomla (versions before 2.20.2) lets remote unauthenticated attackers destroy directory trees on the server through the exposed generateNewApp method, which fails to enforce access control (authentication bypass). Rated CVSS 4.0 9.2 (Critical) with a high availability impact on both the vulnerable component and subsequent systems, this is a data-destruction / denial-of-service flaw rather than a code-execution or data-theft one. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication and authorization bypass in Synopsys/Black Duck Coverity Connect (versions 2023.6.0 through 2026.3.0) allows an unauthenticated attacker to reach certain protected API endpoints by sending a specially crafted HTTP request, exposing data held within Coverity. The flaw stems from a Spring Security misconfiguration classified as CWE-288 (authentication bypass using an alternate path or channel). It carries a CVSS 4.0 score of 9.2 (Critical); no public exploit has been identified at time of analysis, and the AC:H/AT:P metrics indicate exploitation is non-trivial despite requiring no authentication.
Out-of-bounds write and integer overflow in Apache Traffic Server's MIME and HTTP header parsing lets remote attackers corrupt memory by sending crafted headers to the proxy. It affects the 8.x, 9.x (through 9.2.14) and 10.x (through 10.1.3) branches, carries a high CVSS of 8.9 with a scope-change flag, and can lead to high integrity and availability impact. There is no public exploit identified at time of analysis and it is not on the CISA KEV list, but the memory-corruption class makes it a strong patching priority.
Request smuggling and policy bypass in Apache Traffic Server (branches 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) arises because the proxy silently truncates over-long HTTP header names, causing two distinct header names to alias to the same value. A network attacker can exploit this desynchronization to smuggle requests past the proxy and bypass security or routing policy. No public exploit has been identified at time of analysis, but the CVSS 9.3 rating and CWE-444 classification mark this as a high-priority proxy integrity flaw affecting a core CDN/caching component.
Unauthenticated SQL injection in Balbooa's Gridbox extension for Joomla (versions before 2.20.2) lets remote attackers inject malicious SQL through multiple untrusted input vectors without any login. The flaw carries a CVSS 4.0 base score of 9.2 (Critical) and can expose database contents including Joomla user credentials and session data. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated, network-reachable nature makes it a strong patching priority.
SQL injection in ClickHouse Server versions 26.3.9.8 and earlier lets remote attackers inject arbitrary SQL through the CREATE DICTIONARY functionality, which the advisory claims can escalate to arbitrary code execution. Publicly available exploit code exists (GitHub repository CVE-2026-51992), but there is no CISA KEV listing and no EPSS score in the provided data, so no confirmed active exploitation. The provided CVSS is 9.1, though the description's reference to the CREATE DICTIONARY operation suggests an authenticated privilege may actually be required, which conflicts with the PR:N in the supplied vector.
Error-based SQL injection in Koollab LMS allows unauthenticated attackers to exfiltrate sensitive database contents, including user credentials and JWT tokens that may enable account takeover. The vulnerability, reported through Singapore’s CSA, affects the SCORM report endpoint and does not require prior authentication. No public exploit code or active exploitation data (KEV, EPSS) has been observed at the time of analysis, but the high CVSS score and low attack complexity make it a serious risk if the endpoint is exposed.
Blind SQL injection in Koollab LMS enables unauthenticated attackers to exfiltrate sensitive database contents, including credentials and JWT tokens, through its SSO OAuth endpoint without user interaction. This critical flaw (CVSS 9.1) can lead to full account takeover, but no public exploit or active exploitation has been confirmed at this time.
Cross-user information disclosure and a parse-time denial of service in undici's HTTP cache interceptor affect versions 7.0.0-7.28.x and 8.0.0-8.8.x when the interceptor runs in shared mode (the default). A response bearing a degenerate qualified private directive (e.g. private="") slips past the shared-cache guard and is later served to a different caller sharing the same cache key, leaking private bodies and headers including Set-Cookie; separately, mixing an unqualified and a qualified private directive throws an uncaught TypeError that can crash the process. No public exploit identified at time of analysis, and EPSS is low (0.27%), but the fix is confirmed in undici 7.29.0 and 8.9.0.
Arbitrary post and page deletion in the Meta Box AIO plugin for WordPress (versions up to and including 3.8.0) allows unauthenticated attackers to destroy any content on the site. The MB Frontend Submission extension's template_redirect dispatcher routes the mbfs_delete action without any capability or ownership check, and its nonce protection is unreachable on non-AJAX requests, so any page hosting a frontend submission form becomes a deletion endpoint. No public exploit identified at time of analysis, but the trivial GET-based vector and 9.1 CVSS make this a high-priority integrity/availability threat.
Improper authorization in a GitLab CE/EE projects API endpoint allows an authenticated user holding the Maintainer role to modify protected branch configurations beyond what their role should permit, across all versions from 12.8 through 19.2.0. Maintainer-role users - commonly assigned in enterprise GitLab deployments - can exploit this to weaken or remove branch protection rules that enforce code review gates and direct-push restrictions. A publicly available exploit exists via HackerOne report 3807593; no confirmed active exploitation (CISA KEV) has been identified at time of analysis, though the POC materially lowers the bar for exploitation.
Privilege escalation in DriveLock via SQL injection lets authenticated remote attackers reach resources normally protected from their account. The flaw lives in the DriveLock web service listening on TCP port 4568 by default, where a user-supplied string is concatenated into a SQL query without proper validation (CWE-89), and it carries a CVSS 8.8. There is no public exploit identified at time of analysis and it is not on CISA KEV, though it was discovered and coordinated through the Zero Day Initiative (ZDI-CAN-28726 / ZDI-26-286).
We need to produce a comprehensive JSON analysis for CVE-2026-12144. All fields must be plain strings, not arrays/objects. Data provided: CVE description, CVSS 8.8, CVSS vector, CWE-269, tags "Privilege Escalation, WordPress", ENISA EUVD ID, affected versions 0 ≤ 2.0.5, references to plugin trac and Wordfence. No explicit mention of KEV status, POC, patch availability in the data. However, from the description, it's a vulnerability in "Wholesale for WooCommerce" plugin for WordPress. The affected versions: all up to and including 2.0.5. So patch likely needed beyond 2.0.5. No patch mention. But we can infer that the fix might be in a later version, perhaps the changeset reference shows a fix? The changeset URL: https://plugins.trac.wordpress.org/changeset?reponame=&old=3621257%40woo-wholesale-pricing&new=3621257%40woo-wholesale-pricing — this likely shows a diff but we don't have details. We can't confirm patch version without more info. We'll note that no patch version is provided, but the changeset suggests a fix may exist. In remediation, we'll advise upgrading beyond 2.0.5 if a patched version is available. No EPSS or KEV data given, so we'll treat as no active exploitation, no POC. From the description, exploitation requires authenticated attacker with author-level access, who has authored a wwp_requests post to get the nonce. So conditions: user with author role, can create a wholesale request post (wwp_requests), then exploit to escalate to administrator. The attack vector is network (AV:N), but requires authentication (PR:L), no user interaction (UI:N), low attack complexity. So we can craft realistic scenario. Technical context: WordPress plugin, lack of capability check and role validation in save_requests_meta() function, allows arbitrary role assignment via POST parameter. CWE-269 is improper privilege management. Use that. We'll craft each field: product_name: "Wholesale for WooCommerce" (1-3 words) summary: Start with impact verb. "Privilege escalat
Out-of-bounds write in the pgvector PostgreSQL extension (versions before 0.8.6) lets an authenticated database user trigger an integer wraparound during IVFFlat index construction, corrupting heap memory in the backend process and potentially achieving arbitrary code execution. The flaw is exploitable only on 32-bit systems, where size calculations in the k-means clustering routine overflow the Size type. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution and denial-of-service in the TP-Link TL-WR940N v6 router stem from a stack-based buffer overflow in the kernel-resident RTSP connection-tracking (ALG) module. An attacker who lures a LAN-side client into connecting to an attacker-controlled RTSP server can send a crafted RTSP message that the router's kernel helper mishandles, potentially yielding full device compromise. The flaw is exploitable by an unauthenticated attacker against the router's default configuration; no public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV.
Kernel memory corruption in the Linux kernel Bluetooth L2CAP stack arises from a use-after-free in l2cap_sock_new_connection_cb(), which dereferenced a child socket after release_sock(parent) had already exposed it via the accept queue, letting a racing task accept and free the socket first. Any Linux host with Bluetooth enabled and an L2CAP listening socket is affected; a Bluetooth-adjacent attacker able to trigger new connections can win the race to corrupt freed kernel memory, rated CVSS 3.1 8.8 (C:H/I:H/A:H). There is no public exploit identified at time of analysis and EPSS is low at 0.16%, indicating a proactively fixed memory-safety bug rather than one under active attack.
Missing authorization on admin REST endpoints in Apache Atlas 0.8.0 through 2.5.0 allows any authenticated user - regardless of assigned role - to perform privileged administrative operations that should be restricted to administrators. The flaw spans 15 release versions across a multi-year window, affecting all standard deployments of the atlas-webapp component. No public exploit has been identified at time of analysis and the CVE is not listed in CISA KEV, but the low exploitation complexity (any valid credential suffices) makes this a meaningful insider and credential-compromise threat in enterprise data governance environments.
Cross-site request forgery in the RO CSVI (CSV Improved) import/export extension for Joomla by rolandd.com affects all versions from 1.0.0 up to but not including 9.11.0, allowing an attacker to forge requests to the extension's AJAX endpoint handlers. By tricking an authenticated administrator into visiting a malicious page, an attacker can trigger state-changing operations on the victim's behalf, with the CVSS 8.8 vector indicating high impact to confidentiality, integrity, and availability. There is no public exploit identified at time of analysis, and the very low EPSS score (0.10%, 1st percentile) suggests exploitation is not currently widespread.
Remote code execution in the Extra Checkout Options addon (for Extra Product Options & Add-Ons for WooCommerce) affects all WordPress installs running versions through 2.3.2, letting authenticated Subscriber-level attackers upload PHP web shells. Two flaws chain together: eco_save_settings() lacks authorization and nonce checks so a low-privileged user can add 'php' to the tc_eco_custom_file_types upload allowlist, and the wc_eco_upload_file AJAX action performs insufficient authorization, permitting file upload via the frontend nonce exposed on cart and checkout pages. There is no public exploit identified at time of analysis, but the CVSS 8.8 rating and the fact that only Subscriber access is required make this a serious risk; note the vendor only partially fixed it in 2.3.2.
Denial of service in cJSON (DaveGamble's C JSON parser) through version 1.7.19 lets a remote attacker crash any application that applies an untrusted RFC 6902 JSON Patch through cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). By combining add and copy operations that graft duplicated subtrees, an attacker inflates document nesting far beyond the parser's 1000-level limit, and the unbounded recursion in cJSON_Delete() (plus a permissive CJSON_CIRCULAR_LIMIT of 10000 in cJSON_Duplicate()) exhausts the thread stack. Reported by VulnCheck with a public technical write-up; there is no public exploit identified at time of analysis and it is not on CISA KEV.
Denial of service in Apache Traffic Server 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3 lets remote unauthenticated attackers crash the proxy or exhaust its resources by sending abusive HTTP/2 framing and flow-control sequences. The flaw is availability-only (no data disclosure or code execution), carries a CVSS 4.0 base score of 8.7, and has no public exploit identified at time of analysis. The Apache HTTP Server project has released fixed builds (9.2.15 and 10.1.4).
Arbitrary file disclosure and Server-Side Request Forgery in veraPDF's validation-model module allow a remote attacker to read files off the validating host and force outbound requests by feeding it a crafted PDF. The flaw lives in DictionaryKeysHelper.getRichTextStringOrStreamEntryStringRepresentation(), which parses XHTML rich-text (/RC or /RV) annotation content with a default, unhardened DocumentBuilderFactory that resolves external entities and then reflects the expanded entity contents back into the validation report. All current releases of both the classic (org.verapdf:validation-model) and Jakarta (validation-model-jakarta) artifacts are affected; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the vendor advisory (GHSA-3jh7-wm29-q568) describes exploitation as trivial.
Arbitrary file read and Server-Side Request Forgery in veraPDF-validation (and the validation-model-jakarta variant) let a remote attacker exfiltrate server files or reach internal services by submitting a crafted PDF whose XFA stream carries a malicious XML DOCTYPE. The insecure XML parser is reached automatically whenever a PDF is validated against the PDF/UA-1 profile, including via flavour auto-detection, so no operator action beyond normal validation is needed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the vendor advisory (GHSA-36mm-w85j-3q2j) and a fixing patch are confirmed.
Denial of service in open-iscsi's bundled open-isns library (iSNS implementation) lets an unauthenticated man-in-the-middle attacker crash the iSNS client/server by triggering a double free in the attribute-decoding routines. The flaw stems from freed pointers not being nulled in isns_attr_type_string_decode and isns_attr_type_opaque_decode, so a crafted iSNS message causes the same allocation to be freed twice. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; impact is limited to availability, with no confidentiality or integrity effect.
Reflected cross-site scripting in GitLab CE/EE across a vast version range (14.0 through pre-patch releases) enables an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser by enticing them to open a crafted URL. The CVSS vector confirms no authentication is required on the attacker side (PR:N), user interaction is needed (UI:R), and the scope changes (S:C) - meaning the injected script runs outside the originating page's trust boundary, enabling session hijacking, credential theft, or actions performed on the victim's behalf. A publicly available exploit exists on HackerOne (report #3539833), raising the practical risk above what the moderate CVSS score of 4.7 alone suggests.
SQL injection in the Coverity Connect SOAP API (versions 2024.6.0 through 2026.3.0 inclusive) lets an authenticated attacker submit a crafted SOAP payload to read the entire backing database and issue other unauthorized SQL commands. Rated CVSS 4.0 8.7 (High) and reported through a Black Duck product security advisory, it requires only low-privilege authentication and no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Local privilege escalation and authentication bypass in Schneider Electric EcoStruxure Cybersecurity Admin Expert allows a local, high-privileged attacker to abuse weak protection of stored credentials (CWE-522) to modify credentials without authorization and bypass authentication, potentially pivoting to compromise the OT/industrial devices the tool manages. Schneider Electric published security notice SEVD-2026-195-02, and the CVSS 4.0 base score is 8.7 (High) with a scope change into subsequent systems. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Sensitive credential exposure in Flyto Core (flytohub/flyto-core) prior to 2.26.6 lets a remote actor exfiltrate the operator's LLM provider API keys: the llm.chat/ai_model path reads OPENAI_API_KEY and ANTHROPIC_API_KEY from the host environment and forwards them verbatim in an Authorization: Bearer header to a caller-controlled base_url. By supplying a public endpoint that satisfies the existing SSRF guard, an attacker collects the key on their own host. There is no public exploit identified at time of analysis and no CISA KEV listing; the flaw is fixed in 2.26.6, which adds an env-derived-credential endpoint check.