Kernel heap out-of-bounds write in the Linux MCTP serial driver (drivers/net/mctp/mctp-serial.c) lets an attacker on the serial/tty channel corrupt memory adjacent to the netdev private area on any host where an mctpserialN interface has been configured. The receive state machine accepts a zero-length frame, sets rxlen=0, and enters STATE_DATA, so the 'rxpos == rxlen' terminator never fires and every subsequent inbound byte becomes a 1-byte attacker-controlled OOB heap write past the fixed 74-byte rxbuf, continuing effectively unbounded until a frame or escape byte resets the parser. No public exploit is identified at time of analysis and EPSS is low (0.19%), but the flaw was reproduced with KASAN/UBSAN and carries high memory-corruption impact.
SQL injection in SourceCodester Simple Doctors Appointment System 1.0 exposes the `/admin/ajax.php?action=set_appointment` endpoint to unauthenticated remote attackers who can manipulate database queries by supplying crafted values for the `id` argument. The attack requires no privileges or user interaction, and a public proof-of-concept is available on GitHub, lowering the bar for exploitation significantly. No vendor-released patch has been identified at time of analysis, leaving all deployed instances of version 1.0 unmitigated.
Broken object-level authorization in the RSS Aggregator by Feedzy WordPress plugin before 5.2.6 allows authenticated users with author-level access or higher to perform unauthorized actions against import jobs and content they do not own. Affected actions include permanently deleting posts generated by another user's import job, resetting deduplication and scheduling state, disabling jobs, and clearing error logs. Critically, one endpoint performs no object-type check at all, enabling any sufficiently privileged authenticated user to unpublish arbitrary posts and pages site-wide regardless of ownership. A publicly available exploit exists per WPScan; no active exploitation confirmed in CISA KEV at time of analysis.
OS command injection in Dokploy self-hosted PaaS before 0.29.8 allows an authenticated user with project access to run arbitrary commands on the Dokploy host. The getRegistryCommands() function in packages/server/src/utils/cluster/upload.ts builds a `docker login` shell string by interpolating the attacker-controlled registry password and URL without escaping, so malicious credentials are executed when a swarm deployment runs. No public exploit identified at time of analysis, but the root cause and fix are fully disclosed in the vendor advisory (GHSA-prwq-2mcm-mvhr), PR #4579, and the v0.29.8 release.
Block User Account WordPress plugin before 2.0.1 fails to enforce account suspension across every authentication path, leaving blocked users able to retain their full role-level read and write access through the WordPress REST API when they hold an application password created prior to being blocked. All sites running the plugin at versions below 2.0.1 are affected. A publicly available exploit exists per WPScan reporting, though no active exploitation has been confirmed by CISA KEV, and the EPSS score of 0.17% (7th percentile) reflects limited observed real-world exploitation pressure.
Stored XSS in the Saitama Addon Pack WordPress plugin (≤ 1.0.8) lets contributor-level users inject persistent JavaScript into post metadata fields that have no sanitization or escaping applied before output. When a higher-privileged user - editor or administrator - opens the affected content for review, the payload executes in their browser session. A public exploit is available via WPScan; no active exploitation is recorded in CISA KEV, and EPSS sits at the 6th percentile, consistent with targeted rather than opportunistic abuse.
MotoPress Hotel Booking WordPress plugin versions before 6.2.3 permits any authenticated subscriber-level user to modify or overwrite the personal data of arbitrary customers by supplying a chosen record identifier, with no server-side ownership verification in place. The flaw affects WordPress hospitality sites running the plugin in its standard configuration and can be triggered by any user who holds even the lowest WordPress account role - a realistic threat on sites with open guest registration. A publicly available proof-of-concept exists per WPScan, though EPSS data (0.14%, 4th percentile) indicates mass automated exploitation has not materialized; upgrading to version 6.2.3 is the confirmed fix.
Missing authorization on multiple AJAX settings handlers in Customer Reviews for WooCommerce (all versions before 5.116.0) allows any authenticated WordPress user - including low-privilege Subscribers - to invoke administrative settings functions, overwrite plugin configuration options, and read sensitive store configuration data. The flaw stems from absent nonce verification and WordPress capability checks on AJAX actions that should be restricted to shop administrators. A public exploit exists via WPScan, though EPSS signals low widespread opportunistic exploitation at 0.14% (4th percentile); no CISA KEV listing indicates mass exploitation has not been observed.
Malicious code injection into the use-reducer-async GitHub repository (a small React useReducer-with-async-actions helper by dai-shi) turned developer workstations into remote-code-execution targets during npm install. Between 2026-05-18 16:29:52 and 2026-05-19 15:26:07 UTC the default branch carried attacker-planted commits (da72edb through df07d57) that added src/install.js, wired it into the postinstall hook, fetched an attacker-hosted second-stage payload over TLS-verification-disabled HTTPS, and eval'd it with require available. The malicious version was never published to npm and the commits were force-pushed away, but any local clone, fork, or direct-SHA checkout still triggers the payload on install; there is no CISA KEV listing and no public exploit identified at time of analysis for the reconstructable payload itself.
Software supply-chain compromise of react18-use, a small React 19 `use`-hook shim maintained by dai-shi, in which malicious commits pushed to the GitHub default branch between 2026-05-19 01:07:01 and 15:20:43 UTC added a `postinstall` script (`src/install.js`) that runs attacker-controlled remote code on developer machines during `npm install`. The malicious commits were later removed by force-push and the package was never published to npm, but local clones, forks, and direct-SHA URLs still carry them, so any `npm install` against an affected checkout still executes the payload today. There is no public exploit identified at time of analysis and it is not on CISA KEV, but the embedded code itself constitutes working malware (CWE-506); anyone who ran `npm install` on a developer workstation on or after 2026-05-19 01:07:01 should assume full host compromise.
SQL injection in the web server of TBEA TLogger (TBEA Communication Box 3rd Generation), firmware V2.1.0.0B0.0.0.0, lets a remote unauthenticated attacker inject SQL through multiple HTTP endpoints that build SQLite queries from attacker-controlled parameters. Successful exploitation allows reading, altering, or deleting all records in the device's on-board CCU.db database, giving full compromise of the logger's stored data. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the CVSS 4.0 base score of 9.3 and the unauthenticated network vector make it a high-priority defect for affected operational-technology deployments.
Malicious code injection in the react-tracked source repository (GitHub dai-shi/react-tracked) allowed attacker-controlled remote code execution on developer machines during dependency installation. Between 2026-05-18 19:26:36 and 2026-05-19 15:22:45 UTC the default branch carried booby-trapped commits (6978272 through 949f1a3) that added a postinstall hook fetching and evaluating a second-stage payload from an attacker HTTPS endpoint. The malicious commits were force-pushed away and the package was never published to npm, so npm registry consumers are unaffected, but anyone who ran `npm install` against a poisoned checkout, fork, or direct-SHA clone still executes the code today. No public exploit identified at time of analysis and the flaw is not on CISA KEV, though the incident is a confirmed real compromise rather than a theoretical bug.
Supply-chain compromise of the use-context-selector React library (npm package dai-shi/use-context-selector) planted attacker-controlled malicious code that runs during `npm install`. Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34 UTC the GitHub default branch carried malicious commits (9d8481a through 6f2dae0) that added `src/install.js`, wired it into the `postinstall` hook, fetched a second-stage JavaScript payload from an attacker HTTPS endpoint with TLS verification disabled, and evaluated it with `require` available - but only on developer workstations (execution was deliberately skipped on CI and cloud/serverless). The commits were force-pushed out and the package was never published to npm, so there is no public exploit or CISA KEV entry, but any local clone, fork, or direct-SHA checkout retaining those commits will still execute the code on `npm install` today.
Root-level device takeover in TBEA TLogger V2.1.0.0B0.0.0.0 (the TBEA Communication Box 3rd Generation) stems from a hard-coded/default root credential exposed over the device's SSH service, letting remote attackers authenticate as root and gain full administrative control. The static root password can be derived from the /etc/shadow hash and, being shared across devices, works fleet-wide once recovered. There is no public exploit identified at time of analysis and no CISA KEV listing, but the flaw was independently reported by ICS researcher CyberDanube and carries a critical CVSS 4.0 base score of 9.3.
Unauthenticated arbitrary file read in NCEAS Metacat (all 1.x and 2.x through 2.19.1) lets a remote attacker retrieve any file readable by the Tomcat process via a path-traversal in the archiveEntryName parameter of the legacy 1.x action=read endpoint. A single unauthenticated GET request can exfiltrate credentials, DataONE client certificates and private keys, and embargoed research data. Publicly available exploit code exists (POC demonstrated and verified); the issue is fixed only in Metacat 3.0.0, and 2.x will not be backported.
Unauthenticated XML External Entity (XXE) injection in TIBCO/Jaspersoft JasperReports Server (9.0.0 before HF-9 and 10.0.0 before HF-10) allows a remote attacker to submit crafted XML that the server's parser resolves, enabling local file disclosure and server-side request forgery against internal systems. The vendor rates it CVSS 4.0 9.3 (Critical) and no authentication is required. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the unauthenticated network vector makes it a high-priority patch.
Unauthenticated SQL injection in ReadyEcommerce before 4.5.2 lets remote attackers inject into the MySQL HAVING clause of the public products listing API, because the rating parameter is concatenated into the query without parameterization in ProductController.php. Any anonymous internet user can perform time-based blind extraction of the entire database - including user records and administrator password hashes - and, because the database connection runs as root, may pivot to file-system access on the DB host. No public exploit identified at time of analysis, but the flaw is trivially reachable (AV:N/AC:L/PR:N) and reported by VulnCheck.
Arbitrary file read and SSRF in Firecrawl before 2.11.32 lets an API caller exfiltrate files from the extraction worker and reach internal/external HTTP endpoints by abusing JSON-schema dereferencing. The extract feature passes user-supplied schemas to the json-schema-ref-parser library with default resolvers, so a $ref placed inside default, const, or enum fields (which AJV does not traverse) is resolved against the local filesystem or network; a deliberately triggered dereference error then leaks the resolved file contents back through the extraction API's persisted error message. No public exploit or CISA KEV listing is identified at time of analysis, but the fix commit ships security regression tests demonstrating the file:// and metadata-endpoint attack paths.
Stored XSS in FlyEnv before 4.18.0 allows remote attackers to execute arbitrary JavaScript in the Electron renderer process by injecting unsanitized HTML through markdown sources or AI chat messages rendered via Vue v-html directives. Because FlyEnv's Electron renderer operates with Node.js API integration active, exploitation escalates beyond conventional XSS to effective local code execution with unrestricted filesystem access on the developer's machine. A publicly available exploit exists at GitHub issue #809, and vendor-released patch v4.18.0 addresses the flaw.
Unauthorized payment record creation in MotoPress Hotel Booking WordPress plugin before 6.2.3 enables unauthenticated remote attackers to forge completed payment entries against any booking - falsely confirming reservations as paid without executing a real financial transaction. The vulnerable REST endpoint performs no authorization or ownership validation, making any booking ID on an affected site a viable target. A publicly available proof-of-concept exists per WPScan; however, EPSS remains at 0.15% (4th percentile), and no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
Server-side request forgery in the Podcast Player WordPress plugin (all versions before 8.3.1) allows unauthenticated remote attackers to force the server to issue HTTP requests to arbitrary hosts - including internal cloud metadata services, internal APIs, and private network endpoints - and read back any response that parses as RSS/XML. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms zero-friction exploitation requiring no credentials and no user interaction against any WordPress site running an affected plugin version. Publicly available exploit code exists per WPScan; the vulnerability is not listed in CISA KEV, and EPSS sits at 0.15% (4th percentile), indicating limited observed exploitation to date despite the public POC.
Payment verification bypass in the Accept PayPal & Stripe with Subscriptions for WooCommerce plugin (through version 3.1.0) lets unauthenticated shoppers complete WooCommerce orders without paying the merchant a single cent. The plugin fails to validate that the PayPal account receiving the payment matches the merchant's configured account, so an attacker can pay the full order amount to their own PayPal account and the plugin will still mark the order as paid and fulfilled. A publicly available proof-of-concept exists, per WPScan, and EPSS is low (0.14%), indicating no widespread automated exploitation at time of analysis.
Unauthenticated price manipulation in the Salon Booking System WordPress plugin (through 10.30.33) allows any remote visitor to tamper with the stored total of arbitrary bookings by invoking unprotected booking-modification AJAX endpoints. The plugin neither restricts access to these actions nor verifies that the requesting user owns the targeted booking, creating a CWE-862 missing-authorization flaw. No public exploitation in CISA KEV has been confirmed, though a publicly available proof-of-concept exists via WPScan, and EPSS sits at just 0.14% (3rd percentile), suggesting opportunistic rather than widespread active exploitation.
Pinpoint Booking System WordPress plugin (all versions through 2.9.9.6.9) accepts client-supplied booking prices without any server-side validation, allowing unauthenticated visitors to create reservations at arbitrary prices including zero. By selecting a payment method that triggers instant approval, an attacker can obtain a confirmed, cost-free booking - a direct financial impact on site operators. Publicly available exploit code exists via WPScan, though EPSS at 0.14% (3rd percentile) indicates minimal observed automated exploitation at time of analysis; no CISA KEV listing is present.
Sensitive information exposure in the Advanced Classifieds & Directory Pro WordPress plugin (versions through 3.4.2) allows unauthenticated remote attackers to retrieve custom field listing data via the publicly accessible AJAX action `acadp_public_custom_fields_listings`, bypassing WordPress authentication entirely. A publicly available proof-of-concept has been published by WPScan, though EPSS places exploitation probability at the 1st percentile, suggesting limited observed exploitation to date. No CISA KEV listing exists, and a vendor-released patch is available in version 3.4.3.
Authentication bypass in the web management server of TBEA TLogger (firmware V2.1.0.0B0.0.0.0), a data-logging communication box used with TBEA power/photovoltaic equipment, lets an unauthenticated remote attacker reach the protected /index.asp endpoint once any legitimate user has previously authenticated to the device. The attacker can then view and alter device configuration and data intended only for authenticated users, and triggering a logout from the bypassed session can crash the web server. Rated CVSS 4.0 9.2 (Critical); no public exploit identified at time of analysis and not listed in CISA KEV.
Arbitrary file deletion in the cube-root/directory-serve Node.js utility (all versions through 1.3.7) lets an unauthenticated remote attacker remove files anywhere on the host by supplying ../ sequences in the file query parameter of the file-remove middleware. Exploitation requires the server to be started with the --delete option, and the CVSS 3.1 score of 9.1 (I:H/A:H) reflects the potential for destruction of configuration, data, or system files. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivially reproducible from the disclosed source path.
Improper authorization in Daptin through v0.12.34 lets unauthenticated remote guests perform full CRUD (read, create, update, delete) on all usergroup records, effectively bypassing access control on the platform's group and permission objects. The flaw arises because permission checks treat a null/zero UserId as a valid ownership match, so a guest whose session UserId is null is granted owner-level rights over ownerless usergroup rows. No public exploit identified at time of analysis, but the CVSS of 9.1 (network, no auth, no interaction) reflects that manipulating usergroups can be leveraged to escalate privileges and corrupt the platform's authorization model.
Out-of-bounds read in the Linux kernel's SMB/CIFS client DFS referral parser (parse_dfs_referrals) affects systems that mount SMB shares using DFS. A malicious or compromised SMB server can return a referral response whose PathConsumed value exceeds the search name length, causing later DFS path parsing to advance past the end of the buffer and leak adjacent kernel memory or crash the client. Tagged as Information Disclosure with a 9.1 CVSS; EPSS is low (0.18%, 7th percentile) and there is no public exploit identified at time of analysis.
Stored cross-site scripting in SQLBot's SQText dashboard component allows any authenticated low-privilege user who can edit dashboard widgets to inject persistent HTML and JavaScript that executes in the browser of every user who views the affected dashboard. All versions through 1.10.0 are affected per CPE data (cpe:2.3:a:dataease:sqlbot:*:*:*:*:*:*:*:*), with the root cause confirmed by source code evidence as Vue's v-html directive rendering unsanitized TinyMCE output. No public exploit identified at time of analysis via active exploitation (CISA KEV), though publicly available exploit code exists via GitHub issue #1308, and a vendor-released patch is available as of commit c3f40a5.
Directory-traversal / share escape in the Linux kernel's in-kernel SMB3 server (ksmbd) lets an authenticated SMB client create files, directories, or hardlinks outside the exported share. The SMB2 open lookup is correctly rooted at the share with LOOKUP_BENEATH, but ksmbd_vfs_kern_path_create() built an absolute path via convert_to_unix_name() and resolved it from AT_FDCWD, so a '..' component walked from the real filesystem root and escaped the export. It is exploited through a TOCTOU race and has no public exploit identified at time of analysis; EPSS is low (0.17%, 6th percentile) and it is not in CISA KEV.
Arbitrary file write in OpenCart 4.2.0.0 lets an attacker plant a PHP web shell in the webroot by abusing the extension installer, which extracts uploaded .ocmod.zip archives without validating that extracted paths remain inside the target directory (a classic Zip-Slip / path traversal). Because a web shell grants command execution, this escalates to full remote code execution on the store server. There is no public exploit identified at time of analysis, EPSS is low (0.17%, 6th percentile), and it is not on CISA KEV.
Server-Side Request Forgery in the All-in-One Video Gallery WordPress plugin (all versions prior to 4.9.2) allows low-privileged WordPress users to weaponize the server as an HTTP proxy by abusing the public ?vdl=<post_id> download handler, which fetches and streams back the URL stored in a post's mp4 metadata field without destination validation. Attackers who can set that meta value can redirect server-side requests to internal network resources, cloud instance metadata endpoints, or RFC-1918 address space, with the full HTTP response returned to the attacker. No confirmed active exploitation (CISA KEV) at time of analysis, but a publicly available proof-of-concept exploit reported by WPScan exists; EPSS is low at 0.13% (3rd percentile), suggesting exploitation remains targeted rather than widespread.
OS command injection in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the underlying host with the privileges of the web server process. The root cause is unsanitized user input concatenated directly into a Node.js exec() call in pm2panel.js at line 188, where the query parameter 'id' is appended to 'pm2 restart' without any shell escaping or allowlisting. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog, but the attack is trivially reproducible given the straightforward nature of the injection point.
Privilege escalation in Red Hat OpenShift AI (RHOAI) training operator overlay allows any namespace editor to manage TrainJob resources beyond their intended authorization scope. The RHOAI overlay incorrectly injects trainjobs CRUD permissions into the native Kubernetes edit ClusterRole, violating the principle of least privilege. When chained with a companion flaw (TRN-01) that permits arbitrary pod configuration within TrainJobs, a remote attacker holding namespace editor credentials could escalate to arbitrary code execution - no public exploit is identified at time of analysis, and KEV listing has not been confirmed.
Broken object-level authorization in the CubeWP Framework WordPress plugin through version 1.1.30 exposes arbitrary post and user metadata via an unprotected REST API endpoint. Any authenticated user with the Contributor role or higher can request metadata from posts they do not own - including draft, pending, private, and password-protected content - as well as metadata belonging to any user account, including site administrators. A publicly available exploit has been disclosed by WPScan, though EPSS signals (0.13%, 3rd percentile) indicate real-world exploitation remains limited at time of analysis.
Command injection in Dokploy's Traefik configuration reader allows authenticated users holding the traefikFiles.read permission to execute arbitrary OS commands on managed servers by supplying file paths containing shell metacharacters. All Dokploy releases prior to 0.29.13 are affected. The impact is full remote code execution on managed infrastructure: complete confidentiality, integrity, and availability loss on any server managed by the Dokploy instance. No active exploitation has been confirmed (not in CISA KEV) and no public proof-of-concept has been identified at time of analysis.
Unauthenticated remote denial-of-service and device manipulation in TBEA TLogger V2.1.0.0B0.0.0.0 (Communication Box 3rd Generation) allows any network-adjacent attacker to reboot or factory-reset the device, erase application data, or crash the web server - all without credentials. Beyond the missing authentication (CWE-306), multiple data-handling endpoints use unsafe C-style string operations (sprintf, strcat) without bounds checking, providing a second crash vector via crafted parameter input. No public exploit identified at time of analysis, and the device has not been added to the CISA KEV catalog.
Privilege escalation in Red Hat OpenShift AI's training-operator enables any user holding a standard Kubernetes edit or admin role in any cluster namespace to break out of namespace isolation, impersonate service accounts, access the host filesystem, and achieve remote code execution. The root cause is a design flaw: the operator aggregates training job permissions onto native Kubernetes built-in ClusterRoles, and allows unrestricted PodTemplateSpec passthrough - meaning users can submit training jobs containing arbitrary pod configurations such as hostPath mounts or elevated service account tokens. No public exploit code or CISA KEV listing was identified at time of analysis, but the low access complexity and the broad availability of edit/admin roles in typical ML platform deployments make this an urgent remediation priority.
MySQL DSN parameter injection in Red Hat OpenShift AI's Data Science Pipelines Operator (DSPO) allows a namespace editor to enable the MySQL LOCAL INFILE feature via the unvalidated spec.database.customExtraParams field, enabling exfiltration of sensitive files - including Kubernetes service account tokens - from the operator pod. An attacker who exploits this can leverage the stolen token to impersonate the operator's service account and escalate privileges to cluster-admin level within the OpenShift cluster. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Privilege escalation in odh-dashboard, the web interface for Red Hat OpenShift AI (RHOAI), allows any authenticated dashboard user to gain cluster-admin or other highly privileged roles by manipulating the roleRef field when creating RoleBindings. The system performs no server-side validation on the roleRef value supplied through the dashboard, enabling an attacker holding only a standard user account to bind themselves to arbitrary Kubernetes ClusterRoles. No public exploit code has been identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog, but the CVSS 8.8 score and the direct, low-complexity path to cluster-admin access make this a high-priority remediation target for any RHOAI deployment.
Privilege escalation in odh-dashboard (Red Hat OpenShift AI) allows an attacker who has obtained the dashboard's Service Account token to abuse overly broad SA permissions and elevate to cluster-administrator level. Exploitation grants full access to secrets, credentials, and keys across the entire OpenShift cluster, while also breaking multi-tenant isolation between workloads. No public exploit code has been identified at time of analysis, and this CVE is not in CISA KEV, but the CVSS score of 8.8 and cluster-wide blast radius make it a high-priority remediation target for RHOAI deployments.
Incomplete authorization in Dokploy's WebSocket handlers prior to v0.29.13 allows any authenticated organization member to obtain root terminal access to servers and read logs or statistics for services they were explicitly denied access to. The four affected handlers (terminal.ts, docker-container-terminal.ts, docker-container-logs.ts, docker-stats.ts) verify organization membership but never call checkServiceAccess, getAccessibleServerIds, or accessedServices, nullifying all fine-grained role-based access controls. No public exploit or CISA KEV listing exists; however, the attack requires only a valid low-privilege organization account, making this a meaningful privilege escalation risk in any multi-tenant Dokploy deployment.
Authentication bypass in Tegalog (Fumy Otegaru Memo Logger) by Nishishi Factory permits remote unauthenticated attackers to access the management console by exploiting a permissive regular expression (CWE-625) used during login validation. Once inside the console, an attacker can perform any operation the management interface exposes - including creating, modifying, or deleting memo log entries. No public exploit code has been identified at time of analysis, and the product is absent from CISA's Known Exploited Vulnerabilities catalog.
The MaaS (Model-as-a-Service) Gateway component in Red Hat OpenShift AI (RHOAI) is improperly configured, enabling any low-privileged authenticated user within the platform to act as a man-in-the-middle against all model-serving traffic. Affected users can intercept, read, log, and modify requests and responses traversing the gateway, exposing highly sensitive artifacts including API access keys, user input prompts, and model outputs. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog, but the CVSS 8.8 rating with high confidentiality, integrity, and availability impact reflects the severity of unrestricted traffic access within a shared AI serving environment.
Interactive host-shell access in Dokploy prior to 0.29.13 is obtainable by any authenticated platform user due to a missing authorization check in the WebSocket terminal handler. The handler at apps/dokploy/server/wss/terminal.ts validates the session token but never checks whether the user holds an organization role or server-access grant before spawning a terminal for serverId=local, yielding full interactive shell access on the Dokploy host. No confirmed active exploitation or public exploit code has been identified at time of analysis, but the public security advisory and fix diff make reconstruction trivial for any authenticated user.
Integer underflow in the Linux kernel mac802154 link-layer security subsystem allows any unauthenticated IEEE 802.15.4 peer within radio range to corrupt kernel memory by transmitting a crafted secured frame with a payload shorter than the AEAD authentication tag. The flaw in llsec_do_decrypt_auth() causes an unsigned integer wraparound that passes an approximately 4 GiB associated-data length to the crypto subsystem, driving the AEAD scatterwalk far beyond the actual frame buffer and producing a general-protection-fault or exploitable kernel memory corruption. No public exploit is identified at time of analysis and EPSS is very low at 0.21%, but full kernel-level impact (C:H/I:H/A:H) is rated given confirmed KASAN reproduction; real-world exposure is constrained to embedded Linux deployments with 802.15.4 hardware and LLSEC explicitly configured.
Out-of-bounds kernel heap access in the Linux kernel's ath6kl WiFi driver allows an adjacent unauthenticated attacker to trigger zero-size or integer-overflowed kernel allocations by transmitting a malformed ADDBA (Block Acknowledgment) WiFi management frame with an out-of-range window size. Affected are Linux kernel versions from the introduction of the vulnerable code in commit bdcd81707973, with patches confirmed across multiple stable branches (6.6.148, 6.12.101, 6.18.42, 7.1.6, 7.2-rc5). No public exploit code has been identified at time of analysis, and the EPSS score of 0.21% (11th percentile) reflects low current exploitation probability despite the high CVSS score of 8.8.
Double-free memory corruption in the Linux kernel's brcmfmac Broadcom WiFi PCIe driver exposes systems running kernel 5.2 and later to potential kernel heap corruption when a bus_reset event is sequentially followed by device removal. The flaw in brcmf_pcie_release_scratchbuffers() allows dma_free_coherent() to be called twice on the same DMA allocation because freed pointer fields are not NULLed - unlike the sibling release_ringbuffers() function which correctly NULLs its pointers. No public exploit code exists and EPSS exploitation probability is very low (0.21%, 11th percentile), though the high CVSS score (8.8) reflects the theoretical severity of kernel-level memory corruption if the double-free is successfully weaponized.
Use-after-free in the ovpn (in-kernel OpenVPN data channel) module of the Linux kernel, present from version 6.16 onward, allows an authenticated remote VPN peer to trigger kernel memory corruption during peer cleanup. The flaw in unlock_ovpn() occurs because llist_for_each_entry() reads the next list pointer after ovpn_peer_put() may have already freed the peer structure, producing a classic UAF condition in kernel space. No public exploit code has been identified and EPSS probability is very low at 0.21% (11th percentile), though the theoretical worst-case per CVSS 3.1 is full kernel compromise (C:H/I:H/A:H).