SQL injection in SiYuan personal knowledge management (versions <= v3.7.2) lets attackers pass arbitrary SQL statements verbatim to the primary read-write siyuan.db handle via the /api/search/searchEmbedBlock endpoint. Because the endpoint is gated only by CheckAuth, it is reachable with the low-privilege publish RoleReader token - and by fully anonymous users when publish authentication is disabled - and the driver's support for stacked statements allows both reading and modifying content across all opened cleartext notebooks. No public exploit identified at time of analysis, but the flaw was reported by VulnCheck and carries a critical 9.9 CVSS 4.0 score; it is fixed in v3.7.3.
SQL injection in the Sequelize Node.js ORM (versions prior to 6.37.4) allows remote attackers to inject arbitrary SQL through application values that reach the string-escaping routine, but only when the ORM is configured with the Oracle dialect. The escape() function in sql-string.js returns any string beginning with TO_TIMESTAMP or TO_DATE verbatim without doubling single quotes, letting a crafted value break out of the intended literal. Publicly available exploit code exists in the GitHub Security Advisory (GHSA-v8fg-2rw7-q452); there is no CISA KEV listing and no EPSS score was provided.
Unauthenticated remote code execution in the Webinfos WordPress plugin (versions through 1.2) lets any anonymous attacker upload arbitrary files - including PHP webshells - because the plugin's upload handler enforces no file-type validation, authentication, capability, or nonce checks. On servers that execute PHP from the uploads directory, this yields full server compromise. Publicly available exploit code exists (reported by WPScan), and while EPSS is currently low at 0.28%, the CVSS 9.8 rating and automatable, unauthenticated nature make this a high-priority patch target.
Remote code execution in the Personal QR Message WordPress plugin (versions through 1.0) allows unauthenticated attackers to upload arbitrary PHP files via a handler that fails to restrict uploaded file types, and those files are directly reachable and executable on the server. Publicly available exploit code exists (published by WPScan), and the CVSS 3.1 base score is 9.8, though the EPSS probability is low at 0.22% (13th percentile). This is a classic unauthenticated file-upload-to-RCE flaw that grants full server compromise with no authentication or user interaction.
Remote code execution in the 'Insert or Embed Articulate Content into WordPress' plugin (versions up to and including 4.3000000027) allows an Editor-level user to upload a server-executable file by defeating a weak archive-content check, then have the web server run it from a public directory. Publicly available exploit code exists (WPScan), and the flaw carries a critical CVSS 9.8; however, EPSS is only 0.21% (11th percentile) and SSVC lists exploitation status as 'none', indicating no confirmed in-the-wild activity yet. The attack is fully automatable with total technical impact once an Editor account is available.
Account takeover in the ChamaWP WordPress plugin before 1.0.13 lets unauthenticated attackers reset the password of any user, including administrators, resulting in full site takeover. The flaw stems from improper validation of the password-reset request (CWE-862, missing authorization). Publicly available exploit code exists, though EPSS remains low (0.15%) and it is not listed in CISA KEV - no public in-the-wild exploitation confirmed at time of analysis.
Remote code execution in OpenEMR through 8.2.0 lets an authenticated administrator poison the document category tree so that arbitrary PHP runs as the web server user. The flaw lives in library/classes/Tree.class.php, where an attacker chains SQL execution to change the categories table id column to VARCHAR and store a PHP payload that a later unsanitized eval() executes every time any page - including unauthenticated and low-privilege ones - instantiates CategoryTree, turning a one-time admin action into a persistent server-wide backdoor. Publicly available exploit code exists (documented by VulnCheck and Jiva Security), and CVSS 4.0 is 9.4; no active exploitation is confirmed in CISA KEV at time of analysis.
Administrative account takeover in Krayin CRM (Laravel CRM) 2.2.4 lets unauthenticated remote attackers overwrite the primary admin account by POSTing to the installer's admin-config-setup endpoint with an X-Requested-With: XMLHttpRequest header that defeats the CanInstall middleware redirect. Reported by VulnCheck with a publicly available exploit, it carries a 9.3 CVSS 4.0 and grants full control over all CRM data. There is no public exploit identified as actively exploited in CISA KEV, but working exploit code exists.
Account takeover of the primary WordPress administrator affects the Simple Membership plugin in all versions before 4.7.8. Because the registration routine never checks whether user creation actually succeeded before treating the returned value as a valid user ID, an unauthenticated attacker can trigger a failed user creation and cause the plugin to overwrite the existing admin account's data - notably the email address - then seize the account through the standard password-reset flow. A vendor patch (4.7.8) and publicly available exploit details from WPScan exist, though EPSS remains low at 0.14% (4th percentile), indicating no measured mass exploitation yet.
Authentication bypass in Telenia Software TVox (versions 24.x ≤24.9.21 and 26.x ≤26.5.3) lets remote unauthenticated attackers reach every PHP script under the manager HTML directory by appending '/login_admin.php' to any target script's path. The flaw stems from set_env.php trusting the client-controllable PHP_SELF value when deciding whether to skip authentication. Publicly available exploit code exists (KarmaInSecurity KIS-2026-14, reported by VulnCheck), but there is no CISA KEV listing, so treat it as no public active exploitation confirmed despite a ready POC.
SQL injection in the Super Store Finder WordPress plugin (versions through 7.8) lets unauthenticated remote attackers inject arbitrary SQL via an unsanitized parameter in an AJAX action, enabling extraction of arbitrary database contents. Reported by WPScan with publicly available exploit code, the flaw carries a 9.1 CVSS and CISA SSVC rates it automatable with total technical impact, though EPSS remains low at 0.19% and it is not in CISA KEV. There is no public exploit identified as being used in active campaigns at time of analysis.
Authentication bypass in the SoftMarket - Digital Marketplace WordPress plugin (versions through 1.0.0) lets remote unauthenticated attackers impersonate any verified user by supplying only that user's numeric ID to a flawed branch of the email-verification flow, resulting in full account takeover. Publicly available exploit code exists (published by WPScan), and the CVSS 3.1 score of 9.1 reflects high confidentiality and integrity impact with no privileges or user interaction required. Despite the critical rating, the EPSS probability is low (0.19%, 9th percentile) and there is no evidence of active exploitation.
Unauthenticated SQL injection in the Link Library WordPress plugin before 7.9.3 allows remote attackers to inject arbitrary SQL through an unsanitised, unescaped user-supplied value used directly in a database query. Publicly available exploit code exists (published by WPScan), and CISA's SSVC assessment rates the flaw as automatable with total technical impact, though the EPSS probability remains low at 0.18%. A vendor patch is available in version 7.9.3.
Privilege escalation in the "Import and export users and customers" WordPress plugin before 2.4.2 lets a user who holds only the user-creation capability create a full administrator account and overwrite an existing administrator's password or email via the CSV import routine. The plugin fails to re-check WordPress role-assignment and per-user edit permissions on imported rows, so a low-tier account can seize total control of the site. Publicly available exploit code exists (reported by WPScan) and a vendor patch is available; EPSS is low (0.13%), indicating limited widescale exploitation so far despite the high CVSS of 9.1.
SQL injection in Adobe Campaign Classic (ACC) lets a remote, unauthenticated attacker inject arbitrary SQL commands that escalate to arbitrary code execution in the context of the current user, per Adobe advisory APSB26-120. The CVSS 3.1 base score is a maximum 10.0 with a changed scope, reflecting network reachability, no privileges, no user interaction, and full confidentiality/integrity/availability impact spilling into adjacent components. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the maximum severity and unauthenticated network vector make this a top-priority patch.
Remote code execution in Adobe Campaign Classic (ACC) arises from server-side template injection (CWE-1336), where improperly neutralized special elements in the template engine let an attacker run arbitrary code in the context of the current user. Any exposed ACC instance is affected, and per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) exploitation is remote, low-complexity, and requires no privileges or user interaction, with a changed scope pushing the CVSS base score to a maximum 10.0. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, but the perfect score and SSTI class make it a high-priority patch target.
Authentication bypass in Tranquil IT Wapt Server before 2.6.1.17813 lets a remote unauthenticated attacker send a specially crafted packet to obtain a valid session token for a targeted account, yielding full account takeover of the endpoint-deployment console. Because Wapt Server orchestrates software installation across managed endpoints, a stolen operator/admin session effectively grants control over the fleet it manages. Rated CVSS 4.0 10.0 with subsequent-system impact; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Server-Side Request Forgery in Adobe Campaign Classic (ACC) enables remote attackers to coerce the server into issuing crafted internal requests, resulting in privilege escalation without any user interaction. Adobe rates the flaw at the maximum CVSS 10.0 with a changed scope, indicating the SSRF pivots beyond the vulnerable component to compromise other systems or trust boundaries. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated, network-reachable nature makes it a top-priority patch.
SQL injection in Adobe Campaign Classic (ACC) allows a low-privileged, authenticated attacker to execute arbitrary code in the context of the current user without any user interaction. Because unsanitized input reaches an SQL command (CWE-89), an attacker with minimal access can pivot from database manipulation to code execution, and the CVSS scope change (S:C) indicates the impact extends beyond the vulnerable component itself. No public exploit identified at time of analysis, but the 9.9 base score and Adobe's own advisory (APSB26-120) mark this as a top-priority enterprise marketing-platform flaw.
SQL injection in SiYuan's fullTextSearchAssetContent endpoint lets unauthenticated attackers and holders of publish RoleReader tokens execute arbitrary SQL against the read-write asset-content database in all versions before v3.7.3. Because the endpoint is reachable without authentication and the database is writable, attackers can read, alter, or delete data across notebooks - not merely exfiltrate it. No public exploit identified at time of analysis, but the flaw was reported by VulnCheck and carries a CVSS 4.0 base score of 9.9.
SQL injection in SiYuan personal knowledge-management software (all versions before v3.7.3) lets attackers inject arbitrary SQL through the unescaped keyword parameter of the /api/filetree/searchDocs endpoint. Because the query runs on a read-write SQLite handle that permits stacked statements, an attacker can both read and tamper with content across every cleartext notebook, and the endpoint is reachable unauthenticated when publish mode runs with Publish.Auth.Enable=false. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis, and the CVSS 4.0 score is 9.9.
Root-level OS command injection in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 lets attackers inject shell metacharacters into a parameter that is passed unsanitized to a system command, yielding arbitrary command execution as root. OpenMediaVault is a Debian-based network-attached-storage (NAS) management platform, and the -md plugin manages Linux mdadm software RAID arrays. Publicly available exploit code exists (a proof-of-concept gist is referenced), though there is no public exploit identified in CISA KEV; EPSS is modest at 0.62% (46th percentile).
OS command injection in the Serverless-Devs CLI (@serverless-devs/s versions 3.1.11 and earlier) lets an attacker execute arbitrary commands on a developer's machine when they run 's init' with a crafted, attacker-influenced argument. The tool passes unsanitized input into child_process.spawn() with shell:true, and the single guard check - requiring the value to end in '.git' - is trivially satisfied by an attacker while still smuggling shell metacharacters. Publicly available exploit code exists (a proof-of-concept gist), SSVC rates technical impact as total and automatable, but EPSS remains low at 0.48% and it is not in CISA KEV.
Privilege escalation in Adobe Campaign Classic (ACC) stems from an incorrect authorization flaw (CWE-863) that lets an attacker gain elevated privileges without any user interaction. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) scores it 9.8 Critical, implying a network-reachable, low-complexity path to full compromise of confidentiality, integrity, and availability. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, so exploitation is currently theoretical based on the vendor advisory.
Predictable API key generation in osTicket 1.18.3 lets remote attackers reconstruct valid staff API keys by exploiting weak MD5-based construction seeded with the request timestamp and client IP address (CWE-331). Because the key is derived from low-entropy, guessable inputs, an attacker who approximates the key creation window can brute-force the key space and gain API access without credentials. Rated CVSS 9.8 by the reporter; no public exploit is identified at time of analysis, though a technical disclosure write-up exists, and CISA SSVC lists exploitation as none but marks the flaw automatable with total technical impact.
Authorization bypass in Menulux Software Inc. Mobile App (all versions through the 12.05.2026 build) lets remote attackers manipulate a user-controlled key (an Insecure Direct Object Reference, CWE-639) to reach or alter resources belonging to other users, enabling a software integrity attack. TR-CERT rates it CVSS 9.8 with full CIA impact, though the primary documented effect is integrity tampering. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Authentication bypass in the Net::SAML2 Perl module before 0.86 lets an unauthenticated attacker log in as any user against Service Providers that accept EncryptedAssertions. The flaw stems from _verify_encrypted_assertion returning a decrypted assertion as 'verified' whenever it contains no dsig:Signature element, skipping both the signature and trust-anchor checks. Because an SP publishes its encryption certificate in SAML metadata, anyone can encrypt a forged unsigned assertion to it, wrap it in a samlp:Response, and post it to the assertion consumer service; no public exploit identified at time of analysis but the logic bug is trivially reproducible.
SQL injection in FastAdmin v1.6.1.20250430 lets remote attackers inject arbitrary SQL through the application/common/controller/Backend.php component, with the vendor advisory characterizing the impact as extending to arbitrary code execution. The flaw is tagged RCE/SQLi/PHP and carries a CVSS 9.8 rating with total technical impact per CISA's SSVC framework, though publicly available exploit code exists rather than confirmed active exploitation. EPSS is low (0.14%, 4th percentile), suggesting exploitation is not yet widespread despite the critical severity.
Remote code execution in Microsoft Edge (Chromium-based) before 151.0.4129.59 allows a network attacker to run arbitrary code by exploiting a type-confusion condition (CWE-843) when a victim is lured to malicious web content. Because the CVSS scope is Changed (S:C), successful exploitation can escape the affected component and impact the broader system, making this a high-severity browser flaw. There is no public exploit identified at time of analysis and SSVC reports exploitation as 'none', but the total technical impact and 9.6 CVSS score warrant prompt patching.
Remote code execution in Adobe Campaign Classic (ACC) lets an authenticated low-privileged attacker inject directives into dynamically evaluated code (CWE-95 eval injection) and run arbitrary code in the context of the current user. Because the CVSS scope is changed, the impact can reach components beyond the initially exploited one, driving the 9.6 critical score. Reported by Adobe with advisory APSB26-120; no public exploit identified at time of analysis and no CISA KEV listing.
Authentication bypass in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) lets an unauthenticated remote attacker with network access to Management services execute arbitrary commands and fully compromise the management system. It affects a broad range of releases (R80 through R82.10) including R81.20 and R82 running Jumbo Hotfix Accumulator takes at or below fixed thresholds. There is no public exploit identified at time of analysis; Check Point found the flaw internally and reports no indication of active exploitation despite the critical CVSS 4.0 score of 9.3.
Stack-based buffer overflow in the Wavlink WL-NU516U1 (firmware 708c073-mt7628) router's nas.cgi handler lets remote unauthenticated attackers overflow a fixed-size stack buffer by manipulating the HTTP CONTENT_LENGTH value processed via fgets. Successful exploitation can crash the device or execute arbitrary code with full compromise of confidentiality, integrity, and availability. A public write-up (GitHub report2.md) exists, but the flaw is not listed in CISA KEV - no public weaponized exploit is confirmed at time of analysis.
Remote code execution in Tenable Sensor Proxy (versions before 1.4.2) lets an attacker run code with elevated privileges by luring an operator into connecting the sensor to an attacker-controlled host. The CWE-94 code-injection flaw is triggered during that connection, and the CVSS 4.0 score of 9.3 reflects full compromise of confidentiality, integrity, and availability on the proxy host. There is no public exploit identified at time of analysis and it is not on CISA KEV, but a vendor patch is available.
Certificate name-constraint bypass in Bouncy Castle for Java allows a crafted certificate to escape X.509 permitted/excluded subtree restrictions by appending a trailing dot to an rfc822Name (email) or URI host, or by prepending RDNs ahead of a permitted directoryName. Any relying party using BC's PKIXNameConstraintValidator (via CertPathValidator/CertPathBuilder) to enforce name constraints can be tricked into trusting an identity a constrained CA was never authorized to issue, enabling impersonation and effective authentication bypass. There is no public exploit identified at time of analysis, but the vendor rates it 9.3 (Critical) and a fix is available.
TLS hostname-verification bypass in the Bouncy Castle for Java JSSE provider (BCJSSE) ships the legacy certificate-CN fallback enabled by default, even though the vendor documentation states it is opt-in and gated behind the org.bouncycastle.jsse.client.checkCnFallback property. Affected are BC-Java before 1.85, BC-LTS before 2.73.12, and BC-FJA (FIPS) TLS module bctls-fips before 1.0.24, 2.0.24 and 2.1.24; a MITM-positioned attacker can present a SAN-less certificate whose Subject CN names the victim host and have it silently accepted, defeating name-constraint protections and enabling interception of TLS traffic (CWE-297). This carries a CVSS 4.0 base of 9.3, but there is no public exploit identified at time of analysis and it is not in CISA KEV.
Private key recovery in Bouncy Castle for Java (bc-java before 1.85, bc-lts-java before 2.73.12) affects the DH agreement code path, where a peer-supplied public value is exponentiated with the local private key without full range/subgroup validation. A malicious protocol peer can submit small-order or out-of-range Diffie-Hellman elements to mount a small-subgroup confinement attack and, when the local private key is static/reused, gradually recover it via CRT - enabling decryption and impersonation. No public exploit identified at time of analysis; the fix is a vendor-released patch and the vulnerability is not listed in CISA KEV.
Certificate revocation-check bypass in the Bouncy Castle for Java (bc-java) PKIX provider allows a validly-signed OCSP response issued for one certificate to be accepted as proof-of-status for a different certificate, because the stapled response is not bound to the CertID of the certificate actually being checked. This means a revoked end-entity certificate can pass PKIXRevocationChecker validation when a 'good' OCSP response for another serial (e.g. the CA's) is supplied, defeating revocation enforcement in TLS/PKI clients that rely on OCSP stapling. Affected releases are bc-java before 1.85, bc-lts-java before 2.73.12, and BC-FJA (FIPS) before 2.0.2 and 2.1.3; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in SiYuan (self-hosted knowledge-management/note-taking app) versions before v3.7.3 allows anonymous readers in publish mode to exfiltrate the full content of password-protected documents. While the primary getDoc endpoint enforces the publish-mode password, sibling content-returning endpoints (getHeadingChildrenDOM, the getHeading*Transaction family, and getBacklinkDoc) omit that check, so an attacker who harvests internal block IDs from reader-accessible endpoints can pull protected content directly. VulnCheck reported the issue and a vendor patch (v3.7.3) is available; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Information disclosure in SiYuan (a personal knowledge-management/note-taking application) before v3.7.3 lets anonymous readers or low-privilege publish RoleReader tokens read the full rendered content of documents that were explicitly marked publish-disabled. The getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction endpoints return rendered block DOM without enforcing publish-access checks, so supplying a target heading block ID leaks restricted content. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis, and this is not listed in CISA KEV.
Broken access control in SiYuan versions before 3.7.3 lets publish-mode readers - including anonymous users when publish Basic Auth is disabled - retrieve the rendered content of publish-forbidden documents by calling the /api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc endpoints directly with a target document ID. Although the corresponding backlink list endpoints correctly filter publish-forbidden documents, these two content endpoints are gated only by CheckAuth and omit the publish-access filter, exposing DOM content and a reference-existence oracle. Reported by VulnCheck; no public exploit identified at time of analysis and not listed in CISA KEV.
Signature validation bypass in Misskey (versions 12.37.0 through prior to 2026.5.4) allows an attacker to have spoofed ActivityPub activities accepted as authentic. The flaw resides in the JSON-LD signature validation and compaction logic (CWE-347), enabling forgery of federated actions such as posts or actions attributed to other actors/instances. The CVSS 4.0 base score is 9.2 (Critical) with a network, unauthenticated, low-complexity vector emphasizing integrity impact; no public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Signature-verification bypass in the Perl XML::Sig module before 0.71 allows remote attackers to forge which document node is validated by injecting XPath operators through the SignedInfo/Reference/@URI attribute. Because verify() and _get_signed_xml() concatenate the attacker-controlled URI into an XPath expression without escaping or NCName validation, a single quote breaks out of the string literal and lets the injected expression decide which element is digest-checked - undermining the integrity guarantee of any XML Signature the library verifies. No public exploit has been identified at time of analysis, and the flaw is not on CISA KEV; a vendor patch exists in release 0.71.
Authentication and authorization bypass in @fastify/aws-lambda 6.4.0 lets an unauthenticated remote attacker forge the entire AWS Lambda proxy event by setting a single client-controlled HTTP header. Because the request.awsLambda.event/context decoration reads the untrusted x-apigateway-event and x-apigateway-context headers before falling back to the trusted internal invocation token, any application that consults these values for identity or API Gateway authorizer claims can be tricked into granting attacker-chosen access, enabling full privilege escalation. Rated CVSS 9.1; no public exploit identified at time of analysis, but the attack is trivial and documented in the vendor advisory.
Signature verification bypass in the Perl XML::Sig module before 0.71 allows XML Signature Wrapping (XSW) via duplicate ID attributes, letting attackers forge signed content that still validates. verify() resolves a signed Reference URI with the XPath "//*[@ID='$id']" and trusts the first matching node, so a document containing two elements with the same ID passes verification while a downstream consumer reads the attacker-supplied second element; in a SAML2 SP this puts Assertion contents under attacker control. Rated CVSS 9.1 (network, no authentication, no user interaction); no public exploit identified at time of analysis, though the vendor's fix ships a regression test that reproduces the technique.
Man-in-the-middle credential theft and AI-response injection affects Emlog Pro through 2.6.23, where the AI integration module (include/service/ai.php) unconditionally disables TLS certificate validation on every outbound HTTPS call to configured LLM providers. A network-adjacent attacker who can intercept this traffic can present any TLS certificate to harvest the Authorization Bearer API keys sent with each AI request and to forge LLM responses that feed the automated tool-call pipeline, including the query_database and update_config handlers. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the CVSS 4.0 base score of 9.1 reflects the high confidentiality and integrity impact.