Denial of service in Apache Qpid Broker-J through version 10.0.1 allows authenticated AMQP 1.0 clients to exhaust broker CPU resources by sending crafted disposition frames containing large or illegal delivery-ID ranges. The broker's naive range iteration logic processes these ranges without bounds enforcement, causing excessive CPU consumption that degrades or halts message brokering for all connected clients. No public exploit code and no confirmed active exploitation are known at time of analysis; vendor-released fix 10.1.0 is available.
Information disclosure in Qualcomm Snapdragon wireless subsystem allows an adjacent-network attacker to leak sensitive memory contents by transmitting malformed wireless channel switch frames with invalid length fields. The root cause is CWE-191 (integer underflow), where improperly formatted length values trigger an arithmetic wrap condition during 802.11 management frame parsing, resulting in out-of-bounds memory reads. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the low attack complexity and no-authentication requirement on an adjacent wireless segment represent a meaningful real-world risk for shared wireless environments.
Information disclosure in Qualcomm Snapdragon chipsets exposes private data transmitted during NG-eCall SIP signaling when IPSec negotiation fails or is improperly established. Attackers adjacent to the network can intercept unprotected signaling traffic, gaining access to sensitive session data - potentially including location coordinates and caller identity transmitted as part of the automated emergency call system. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Uncontrolled resource consumption in Apache Qpid Proton-Dotnet through 1.0.0 allows an authenticated AMQP client to trigger denial of service by sending a single delivery split across an unbounded number of transfer frames. The .NET implementation of the AMQP 1.0 toolkit lacked any enforced ceiling on incoming transfer frames per delivery, meaning a malicious but authenticated peer can exhaust receiver memory or CPU without restriction. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; the fix is available in version 1.1.0.
Denial of service in Apache Qpid Proton-Dotnet through 1.0.0 allows an authenticated AMQP peer to exhaust CPU resources on the target host by sending a crafted disposition frame containing large or illegal delivery ranges. The library's naive range-iteration logic processes these unbounded ranges without safeguards, causing the consuming thread to spin and starve legitimate message processing. Vendor-released patch version 1.1.0 is available; no public exploit or CISA KEV listing has been identified at time of analysis.
Session flow control enforcement failure in Apache Qpid Proton-Dotnet through version 1.0.0 allows an authenticated attacker to deliberately exceed the AMQP incoming session flow control window, potentially causing denial of service on affected messaging endpoints. The vulnerability is rated 'important' by Apache and affects the .NET client library for AMQP-based messaging infrastructure. No public exploit code or active exploitation has been identified; vendor-confirmed fix is available in version 1.1.0.
Resource exhaustion in Apache Qpid Broker-J through version 10.0.1 enables authenticated remote attackers to cause denial of service by submitting an unbounded number of AMQP 1.0 transfer frames within a single incoming delivery, with no broker-side enforcement of a per-delivery frame ceiling. The broker's AMQP 1.0 protocol plugin lacks the necessary throttling logic, meaning sustained abuse can exhaust memory and CPU resources and deny service to legitimate messaging clients. No public exploit code has been identified and this vulnerability is not listed in CISA KEV; a vendor-released patch is available in version 10.1.0.
Resource exhaustion via oversized serialized Lottie animation payloads in Samsung Open Source rlottie allows denial-of-service against any application embedding the library. The library failed to bound precomposition nesting depth, total render-node count, Repeater element copy counts, and did not validate non-finite float values (NaN/Infinity) for polystar and polygon point counts during deserialization and rendering. When a user or application opens a crafted Lottie JSON file, the renderer enters unbounded recursion or allocates excessive memory, crashing or hanging the host application. No public exploit or active exploitation (KEV) has been identified at time of analysis.
DNS rebinding bypasses Open WebUI's SSRF protection in all versions prior to 0.11.0, enabling authenticated attackers who control authoritative DNS for a submitted hostname to reach internal resources - including cloud instance metadata services (e.g., 169.254.169.254), loopback admin APIs, and internal network services. The root cause is a TOCTOU race: the hostname is resolved once for validation and again at connection time, letting a TTL=0 DNS record switch from a public IP during the check to an internal IP during the actual fetch. On most vulnerable paths the internal response is returned directly to the attacker; the OAuth path additionally forwards the OAuth access token as a Bearer header to the attacker-controlled internal target, enabling credential theft. No public exploit identified at time of analysis.
Open WebUI's terminal WebSocket route omits the role-state verification gate that all HTTP terminal endpoints enforce, granting `pending`-role accounts - unapproved registrations or deactivated users - interactive shell access that the HTTP plane correctly denies. Affected pip package versions span v0.8.8 through v0.10.x; the flaw was introduced when the terminal WebSocket route was first added in v0.8.8 and persisted because FastAPI dependency injection cannot be applied to WebSocket handshakes, leading to a divergent reimplementation. No public exploit code has been identified at time of analysis, but exploitation requires only a valid pending-role JWT obtainable by design during registration or retained for up to four weeks after deactivation.
User-agent session binding in oidcc_plug's OpenID Connect authorization plug is silently rendered inert by a case-sensitivity bug, affecting all versions from 0.1.0-alpha.3 through 0.5.0 that configured check_useragent: true. The authorize plug reads the User-Agent header using a mixed-case key, but Plug normalizes all HTTP header names to lowercase before storage, so the lookup always returns an empty list and nil is written into the OIDC session; the callback plug then treats a stored nil as nothing to compare and returns :ok unconditionally, meaning a stolen session replayed from a different browser or device passes the user-agent check without detection or logging. No public exploit has been identified at time of analysis, and CSRF/state, nonce, and PKCE protections remain fully functional.
Reflected XSS in O2OA v10's Forum posting function allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser by convincing them to click a crafted URL. The Changed scope (S:C) in the CVSS vector confirms the exploit breaks out of the application's origin into the broader browser context, enabling session token theft or unauthorized actions on behalf of the victim. No active exploitation is confirmed (not in CISA KEV), and EPSS at 0.22% (12th percentile) alongside SSVC 'Exploitation: none' indicate low real-world exploitation activity at time of analysis.
URI scheme injection in @a2ui/web_core's openUrl function enables stored or reflected XSS by allowing an agent-controlled javascript: URI to be passed directly to window.open() without validation. Any application using the Button component's functionCall action on default deployments is affected, since the Basic Catalog is enabled with no special configuration required. CVSS 4.0 impact metrics VC:H/VI:H confirm full confidentiality and integrity compromise at the vulnerable-system level; no active exploitation is confirmed (CVSS E:U, no CISA KEV listing).
Cross-site scripting in Soliton Systems MailZen Management Portal versions 2.62 and 2.63 allows a network-accessible, unauthenticated attacker to inject malicious JavaScript into user-controlled fields (Role Name, First Name, Last Name, Username) that is subsequently rendered to authenticated users - most likely administrators reviewing account data. Exploitation yields client-side arbitrary JavaScript execution in the victim's browser context, enabling session hijacking, credential theft, or unauthorized administrative actions. No active exploitation is recorded in CISA KEV, and EPSS indicates a 0.19% probability of near-term exploitation; however, a public researcher writeup exists on GitHub (FahadAljuaid), meaningfully raising practical risk.
Secure boot bypass in Caliptra Core ROM 2.1.0-2.1.1 (subsystem mode) enables a local attacker controlling compromised MCU firmware to silently load unauthorized firmware into ICCM while attestation continues reporting the originally verified image digest, masking the compromise entirely. The TOCTOU race in UpdateResetFlow::run() is compounded by absent validation of the caller-supplied AXI staging address against the strap-configured SS_EXTERNAL_STAGING_AREA_BASE_ADDR, creating a window between verification and ICCM load during which SRAM contents can be swapped. No public exploit has been identified and no CISA KEV listing applies, but the severity lies in the attack's undetectability through standard attestation channels.
Code injection in VibeSurf's Python Validation Handler enables remote unauthenticated attackers to inject and execute arbitrary Python code by manipulating the /code endpoint. All versions up to commit cd6e519d507cdd4d63061300bf60fb176e1f57e0 are confirmed affected per EUVD-2026-52704. No patch is available - the vendor did not respond to disclosure - and a public proof-of-concept exists (CVSS 4.0 E:P, corroborated by an asciinema recording in the references), making exploitation accessible to low-skilled attackers.
Stored XSS in HUMANIST Digital Human Resources version 26.0 enables authenticated low-privilege users to inject persistent malicious scripts that execute in the browsers of other platform users, including higher-privileged HR administrators. The vulnerability was disclosed by TR-CERT (advisory TR-26-0737) and is resolved in version 26.1. No public exploit code or confirmed active exploitation has been identified at time of analysis.
Open redirect in HUMANIST Digital Human Resources (versions 26.0 through pre-26.1) enables authenticated attackers to craft malicious URLs that silently forward victims to attacker-controlled phishing sites. The CVSS vector (PR:L/UI:R/S:C) confirms the vulnerability requires a low-privileged account to generate the redirect link and victim interaction to trigger it, with scope change reflecting cross-domain trust abuse. No public exploit code or active exploitation has been identified at time of analysis; this was reported by TR-CERT under advisory TR-26-0737.
SSRF bypass in stunnel 5.79 and earlier allows authenticated SOCKS proxy clients to circumvent intended localhost access restrictions by supplying IPv4-mapped IPv6 addresses (e.g., ::ffff:127.0.0.1) or unspecified addresses (0.0.0.0, ::) in proxy requests. Exploitation reaches loopback-bound services on the stunnel host - services deliberately isolated from external network access - potentially exposing internal APIs, administrative interfaces, or other localhost-only endpoints. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Observable response discrepancy in HUMANIST Digital Human Resources 26.0 exposes the system to unauthenticated account footprinting, enabling attackers to enumerate valid user accounts by analyzing differentiated server responses. The vulnerability is classified under CWE-204 and was reported by TR-CERT (Turkish national CERT), affecting the HR platform's authentication or account-lookup endpoints. No active exploitation has been identified in CISA KEV and no public exploit code is known, but the network-accessible, zero-authentication attack surface makes this a viable reconnaissance vector preceding credential-based attacks.
Out-of-bounds read in OpenSIPS versions prior to 3.6.6 and 4.0.0-rc1 allows unauthenticated remote attackers to trigger memory over-reads in the multipart SIP body parser by sending a crafted message with Content-Type: multipart/mixed whose body contains "--" within two to three bytes of the buffer end. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms network-reachable, zero-prerequisite exploitation with low availability impact, though the reporter's "Information Disclosure" tag conflicts with the official C:N rating, suggesting potential memory leakage beyond what the score reflects. No public exploit or CISA KEV listing has been identified at time of analysis; vendor-released patches are confirmed in 3.6.6 and 4.0.0-rc1.
Cross-user file content disclosure in Open WebUI versions 0.8.8 through 0.10.2 allows any authenticated user to read indexed chunks from another user's private files by supplying a crafted inline model definition with a known target file UUID. The chat completion, chat completed, and chat action endpoints accepted client-supplied knowledge attachments on inline (non-workspace) model definitions without enforcing the caller's read access, bypassing the access control that saved workspace models correctly enforce. No active exploitation has been confirmed; the vendor released a complete fix in version 0.11.0.
NVIDIA Dynamo for Linux versions 0 through v1.2.0 leaks sensitive information through crafted error message generation, exploitable remotely without authentication. The CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms low-complexity unauthenticated network access is sufficient to trigger disclosure. No public exploit code has been identified at time of analysis and no CISA KEV listing exists, indicating this is not currently confirmed as actively exploited at scale.
Incorrect authorization in Veeam ONE's shared report link feature permits a low-privileged authenticated user to retrieve report data beyond the intended scope boundary of that link. Exploitation requires a valid Veeam ONE account but no elevated privileges, and the attack is network-accessible with low complexity. No public exploit code or CISA KEV listing exists at time of analysis, placing this in the medium-priority tier despite the straightforward exploitation path.
Authorization bypass in the TicketDetailView component of Ehco1996 django-sspanel allows authenticated remote users to access support tickets belonging to other users by manipulating a user-controlled key in requests to apps/sspanel/views.py. All releases through 2023.12.26 are affected per ENISA EUVD-2026-52981. No patch will be issued - the maintainer has abandoned the project and did not respond to disclosure - leaving operators with no vendor remediation path. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Stored cross-site scripting in Django admin's URLField rendering allows a malicious URL value (e.g., using a `javascript:` scheme) to be displayed as a clickable link on changelist views and read-only admin fields without scheme validation. Any application that accepts URLField input via public-facing forms and exposes those records in the Django admin is affected, covering Django 5.2 through the 6.1 release candidate. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; patches were released August 4, 2026 as Django 5.2.17 and 6.0.8.
Persistent denial of service in dhcp-server (dhcpd) on Red Hat Enterprise Linux 6 through 9 is triggered via a crafted OMAPI lease creation request containing an overly long InfiniBand MAC address, overflowing a buffer in `print_hw_addr()` and crashing the dhcpd daemon in a way that prevents automatic recovery. The official CVSS score of 4.9 with PR:H reflects the assumption that TSIG authentication guards the OMAPI port; however, the description explicitly highlights that TSIG is optional and often absent, reducing the realistic exploitation barrier to unauthenticated network access. No confirmed active exploitation (KEV) or public proof-of-concept exists at time of analysis.
Stored cross-site scripting in Pega Platform (Pega Infinity) versions 23.1.0 through 25.1.3 allows a high-privileged developer-role user to inject persistent malicious JavaScript into a UI component, which then executes in the browser context of any user who subsequently views the affected interface. The attack requires both a developer-role account to plant the payload and victim user interaction to trigger it, substantially limiting realistic blast radius compared to typical stored XSS. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis.
Path traversal in WildFly's domain mode LocalFileRepository exposes arbitrary files readable by the Domain Controller process to attackers who have already obtained or compromised a slave host controller. The flaw resides in the wildfly-core/deployment-repository component, where getFile() and getConfigurationFile() fail to canonicalize or bound-check caller-supplied paths before resolving them on disk, enabling directory traversal sequences to escape the configured repository root. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified, but successful exploitation yields high-confidence access to sensitive artifacts including keystores, credentials, and configuration files.
Open WebUI versions 0.7.0 through 0.10.x fails to re-validate the `features.image_generation` permission on the legacy chat-completions code path, allowing an authenticated user whose image generation rights were explicitly revoked to bypass the restriction by supplying the feature flag directly in a chat API request. This affects only deployments where an administrator has both enabled ENABLE_IMAGE_GENERATION and explicitly revoked per-user image generation rights - a non-default, deliberately restricted configuration. The result is unauthorized consumption of the operator's configured image provider API credits and quota, and unauthorized writes of generated files to the operator's storage; no public exploit has been identified at time of analysis.
Cross-knowledge-base IDOR in Open WebUI 0.9.6-0.10.2 allows any user with write access to one knowledge base to silently delete directories and file embeddings from unrelated knowledge bases they do not control, causing documents to vanish from RAG retrieval results and breaking chat-with-file for targeted files without disclosing their contents. The flaw (CWE-639) sits in the sync cleanup endpoint, which authorized requests based on the URL knowledge base ID but executed destructive operations against object IDs supplied in the request body without verifying those objects belonged to the authorized knowledge base. No public exploit is identified and no CISA KEV listing exists; the vendor released a complete fix in v0.11.0.
Blind SSRF in Ghost Admin's image-size fetching module allows any authenticated staff-level user to issue arbitrary HTTP GET requests from the Ghost server to internal network hosts. Affecting all Ghost npm releases from v0.10.0 through v6.54.0, the flaw resided in the image dimension detection code path, which used an unprotected generic HTTP client with no SSRF controls when fetching external images for certain formats requiring a full response buffer. No public exploit or CISA KEV listing exists; no EPSS data was provided. The vulnerability was fixed in v6.54.1 by routing fetches through Ghost's SSRF-protected `externalRequest` got-based client.