Authentication bypass and account takeover in N-able N-central through version 2026.3.1 stem from an incomplete remediation of CVE-2026-18556, leaving an alternate authentication path exploitable by unauthenticated remote attackers. The vendor's CVSS 4.0 submission includes E:A (Attacked), indicating active exploitation is occurring against this incomplete patch. Despite high attack complexity (AC:H), the absence of privilege requirements and the high-value nature of RMM platforms - which provide lateral movement to thousands of managed endpoints - makes this a critical priority for MSP operators.
Unauthenticated SQL injection in AcyMailing WordPress plugin (versions before 10.11.1) allows remote attackers to read sensitive data from the underlying database and perform limited data modification without any credentials. Reported by WPScan and assigned CVSS 8.2, the flaw is network-exploitable with no user interaction required. A publicly available proof-of-concept exists; however, EPSS sits at 0.19% (8th percentile), indicating minimal observed exploitation activity at time of analysis despite the public PoC, and the vulnerability is not listed in the CISA KEV catalog.
Account takeover via unauthenticated password reset in the Lenxel WP WordPress theme (all versions through 1.0.31) allows any unauthenticated remote attacker to seize control of any WordPress account, including site administrators, by submitting a crafted reset request without owning or being authorized for the target account. The theme's reset action validates only a WordPress CSRF nonce - obtainable by any visitor loading the reset page - while performing no ownership or authorization check against the account being reset. No confirmed active exploitation (not in CISA KEV), though a public POC exists via WPScan and SSVC rates the technical impact as total; EPSS remains very low at 0.12% (2nd percentile), consistent with the niche theme footprint.
Complete authentication bypass in the login-social WordPress plugin (≤1.0.4) enables unauthenticated remote attackers to reset any user's password without a valid reset key and to forge login sessions using unverified third-party identity data, giving attackers full administrator access and site takeover capability. Any WordPress site running this plugin is exposed regardless of configuration, as both failures reside in the plugin's core authentication flows. A publicly available exploit exists per WPScan; EPSS sits at 0.19% (9th percentile), suggesting exploitation is targeted rather than widespread at this time, though the public PoC lowers the technical barrier considerably.
Simply Schedule Appointments WordPress plugin before 1.6.12.6 exposes all site appointment records to unauthenticated users through a bulk operation endpoint lacking object-level authorization, enabling mass personal data (PII) disclosure across the entire WordPress installation. On premium editions, the same unauthenticated path allows permanent deletion of all appointment records, adding a destructive integrity and availability impact not reflected in the published CVSS score. A public proof-of-concept exists per WPScan, and the SSVC framework rates this as automatable with no active CISA KEV listing; EPSS at 0.19% suggests limited observed exploitation to date but does not negate the ease of scripted mass harvesting.
Unauthenticated exposure of OAuth credentials in the Gallery for Google Photos WordPress plugin (all versions before 1.2.1) allows any remote attacker to retrieve the stored Google access and refresh tokens of the connected account without authentication. Because refresh tokens are long-lived and self-renewing, a successful retrieval grants persistent, long-term access to the linked Google account well beyond any single session. A publicly available exploit exists per WPScan, though EPSS remains low (0.16%, 6th percentile), suggesting exploitation is not yet widespread.
Unauthorized media file disclosure in the Product Attachment for WooCommerce WordPress plugin (all versions before 2.3.3) allows any unauthenticated internet user to download arbitrary WordPress media library files by enumerating sequential numeric attachment IDs. The plugin's file-streaming endpoint performs no authorization check whatsoever, exposing private or deliberately unlinked uploads - such as internal documents, confidential product specifications, or draft media - to the public. A publicly available proof-of-concept exists per WPScan, though EPSS sits at 0.15% (5th percentile), indicating low observed exploitation rates at time of analysis despite easy weaponization.
Unauthenticated API abuse in the AI ChatBot for WooCommerce WordPress plugin (all versions before 4.8.4) permits any remote visitor to trigger a backend AJAX action with no authorization check or nonce validation, causing the plugin to forward requests to the site owner's stored third-party AI API credentials - generating charges billed directly to the owner's account. A publicly available exploit exists per WPScan, though EPSS sits at 0.15% (5th percentile), indicating limited current automated exploitation; this CVE is not listed in the CISA KEV catalog. When the plugin's optional knowledge-base indexing feature is enabled, the same unprotected endpoint additionally exposes indexed site content to unauthenticated retrieval, introducing a confidentiality dimension alongside the financial abuse risk.
Authentication bypass in the SMS Alert WordPress plugin before 3.9.8 allows unauthenticated remote attackers to log in as any registered user - including site administrators - by exploiting broken OTP session binding. The plugin marks a session as 'mobile verified' after an attacker validates an OTP to their own phone, then naively trusts a separately supplied, attacker-controlled phone number to resolve and authenticate the target account. A public proof-of-concept is available via WPScan; while EPSS remains low at 0.15% (5th percentile), the combination of administrative account takeover potential and available exploit code makes this a high-priority patch for affected WordPress deployments.
Missing capability check on a WordPress AJAX action in Five Star Restaurant Reservations before 2.7.23 permits any user holding the plugin's lowest booking-management role to reset the site's configured booking notification rules - a setting they are explicitly barred from accessing through the UI. Notably, the provided CVSS vector (PR:N, C:H) conflicts materially with the description, which requires an authenticated role and describes an integrity-only impact; defenders should not rely on the published score at face value. A publicly available exploit exists via WPScan, though EPSS at 0.13% (3rd percentile) indicates no meaningful opportunistic exploitation has been observed.
Path normalization bypass in Better Auth before v1.4.5 allows unauthenticated remote attackers to circumvent `disabledPaths` security controls and path-based rate limits by submitting requests with extra leading slashes (e.g., `//sign-in/email` instead of `/sign-in/email`). The root cause is in the bundled rou3 router library, which collapses empty path segments before route matching, meaning security rules keyed on canonical paths never match the double-slash variants. No public exploit code has been identified at time of analysis, but the trivially low attack complexity makes exploitation straightforward on unprotected deployments.
Heap-based buffer overflow in FreeRDP's Windows clipboard client (versions ≤ 3.29.0) allows a malicious or compromised RDP server to write attacker-controlled data beyond the bounds of a paste consumer's heap allocation. The flaw in CliprdrStream_Read trusts the server-supplied response length (req_fsize) rather than the caller-supplied buffer bound (cb), so any OLE paste consumer such as explorer.exe that calls IStream::Read against server-offered clipboard file contents can have its heap corrupted. No active exploitation has been confirmed (not in CISA KEV), no public exploit code has been identified, and a fix is available in FreeRDP 3.30.0.
Privilege escalation in ArcadeDB before 26.7.3 allows any user holding UPDATE_SCHEMA permission to create server-wide administrator accounts by crafting malicious JavaScript triggers. The root cause is that the real LocalDatabase object is bound into trigger execution contexts with GraalVM's HostAccess.ALL policy, exposing the full Java security API - including getSecurity().createUser() - without permission checks. No public exploit has been identified at time of analysis, but a vendor-released patch is available in 26.7.3 per the GitHub security advisory GHSA-38pf-6hp2-pxww.
Principal type confusion in Vikunja (versions 0.22.0-2.3.0) allows an authenticated low-privilege attacker to fully control any target user's API token management by exploiting a numeric ID collision between the independent link-share and user ID sequences. The `/api/v1/tokens` endpoints resolve the caller identity exclusively via the generic `web.Auth.GetID()` interface without validating whether the authenticated principal is a user or a link-share, meaning a link-share JWT whose integer ID equals a victim's user ID is accepted as that user's credential. No CISA KEV listing and no public exploit code have been identified at time of analysis, but successful exploitation yields the ability to mint new API tokens under a victim's identity with attacker-chosen permission scopes, constituting a functional account takeover at the API level.
Stack buffer over-read and stray one-byte NUL write in Zephyr RTOS's experimental OCPP 1.6 client allow a malicious or compromised OCPP central server - or an on-path attacker exploiting the commonly unencrypted ws:// transport - to crash a connected embedded device by sending a crafted WAMP RPC frame with an oversized uid or action field. The vulnerable helper extract_string_field() uses strncpy() without guaranteeing NUL-termination, causing a subsequent strchr() call to scan unbounded into adjacent stack memory; a secondary defect in extract_payload() compounds this on maximal-length frames. No active exploitation has been confirmed by CISA KEV, but SSVC classification indicates publicly available proof-of-concept code, and EPSS sits at a low 0.19% (10th percentile), consistent with a niche embedded RTOS attack surface.
Cleartext leakage of the HA cluster token in ArcadeDB's MCP get_server_settings tool allows any authenticated MCP user to escalate to full root-level server control in all versions before 26.7.3. The exposed arcadedb.ha.clusterToken can be replayed via the X-ArcadeDB-Cluster-Token and X-ArcadeDB-Forwarded-User HTTP headers to impersonate the root user, turning a low-privilege information disclosure into a complete server compromise. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog; however, the chained privilege escalation path significantly elevates real-world impact beyond the CWE-200 classification suggests.
Integer overflow in FreeRDP's audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends affects all versions before 3.29.0, exploitable by a malicious or compromised RDP server. The server can supply a crafted FramesPerPacket value that causes allocation size wraparound, leading to a heap-based buffer overflow on Linux/ALSA - potentially enabling code execution - or denial of service on all supported platforms. No public exploit or active exploitation (CISA KEV) has been identified at the time of analysis; vendor-released patch (3.29.0) is available.
Privilege escalation in ArcadeDB before 26.7.3 allows any authenticated MCP user to fully bypass the database authorization framework. The MCP HTTP transport layer fails to bind the authenticated principal into the engine's permission context, causing all access control checks to silently resolve as no-ops regardless of the user's actual role. Affected users can perform arbitrary DDL, schema mutations, unrestricted database writes, and execute arbitrary JavaScript via the query tool - effectively gaining root-level database access from a low-privileged account. No public exploit has been identified at time of analysis and this CVE is not listed in CISA KEV, though the impact is severe for any deployment with MCP transport enabled.
Directory traversal in the User Access Manager WordPress plugin (all versions ≤ 2.3.15) permits unauthenticated remote attackers to read arbitrary files from the server filesystem by exploiting a logic flaw in the plugin's file-serving access check. By pairing a path traversal string in the `uamgetfile` parameter with a valid public attachment ID, an attacker causes the plugin's fallback mechanism to approve access against a legitimate public attachment while streaming the attacker-chosen file path - effectively bypassing all access controls. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the zero-prerequisite exploitation conditions (CVSS AV:N/AC:L/PR:N/UI:N) mean that sensitive files such as `wp-config.php` and `.env` are exposed on any affected site with the plugin's file protection feature active.
Directory traversal in the CubeWP Framework WordPress plugin (all versions through 1.1.30) enables unauthenticated attackers to read arbitrary files accessible to the web server process via the cubewp_get_svg_content AJAX handler. The nonce mechanism that gates this endpoint is rendered ineffective because the nonce is publicly emitted into page markup whenever the CubeWP posts shortcode or widget with AJAX loading is active, allowing any guest visitor to harvest it before submitting a malicious request. No public exploit or KEV listing has been identified at time of analysis, but the CVSS 7.5 rating reflects realistic unauthenticated, low-complexity exploitability with full confidentiality impact - targeting files such as wp-config.php containing database credentials and secret keys.
Privilege escalation in Red Hat Build of Keycloak's user creation component exposes environments running Fine-Grained Admin Permissions V2 (FGAP V2) to unauthorized group assignment by scoped sub-administrators. A sub-admin holding only user-create permissions can bypass group-level authorization checks and enroll newly created users into any group - including privileged or sensitive ones - well beyond the sub-admin's delegated scope. SSVC rates technical impact as total and no public exploit has been identified, though the EPSS score of 0.24% (15th percentile) and SSVC exploitation status of 'none' indicate low immediate exploitation likelihood.
Arbitrary file write via path traversal in HuggingFace Transformers (<=5.8.0.dev0, fixed in 5.10.0) enables a supply-chain attacker to overwrite arbitrary files on a victim's filesystem. The flaw exists in `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where dictionary keys from the `chat_template` field in a downloaded `tokenizer_config.json` are used verbatim as filenames with no path sanitization. An attacker need only publish a malicious model repository on HuggingFace Hub; exploitation is triggered when the victim calls `save_pretrained()` after loading the poisoned model. No active exploitation is confirmed (not in CISA KEV), but the attack surface spans all practitioners using the affected `save_pretrained()` path across multiple popular processor families.
Insecure Direct Object Reference in the better-auth passkey plugin (npm/@better-auth/passkey < 1.4.0) permits any authenticated user to delete arbitrary passkeys belonging to other users via the `POST /passkey/delete-passkey` endpoint. The `ctx.body.id` parameter is implicitly trusted without ownership verification, meaning a valid session - regardless of privilege level - is sufficient to enumerate and destroy other users' passkey credentials. Applications configured with `useNumberId` (auto-incrementing integer IDs) are trivially exploitable by sequential enumeration. No public exploit or CISA KEV listing confirmed at time of analysis; a vendor-released patch exists at version 1.4.0.