SQL injection in Twenty, an open-source CRM platform, lets a workspace administrator holding the DATA_MODEL permission inject arbitrary PostgreSQL into the DDL of the system searchVector TS_VECTOR field. By supplying a crafted settings.asExpression via PATCH /rest/metadata/fields/:id or the updateOneField GraphQL mutation, the attacker breaks out of the GENERATED ALWAYS AS (...) column clause and executes statements as the application database user, compromising all workspace data. It is fixed in 2.15.0, requires authenticated high-privilege access (CVSS 9.1, PR:H), and has no public exploit identified at time of analysis.
Server-side request forgery in Grafana's mcp-grafana (Grafana MCP Server) lets an authenticated caller override the outbound request destination via the X-Grafana-URL header while using the grafana_api_request tool to control HTTP method, path, and body. Because the destination is never constrained to the configured Grafana instance, callers can pivot the server into internal, loopback, and link-local services-including cloud metadata endpoints-and read the responses. This is an incomplete-fix follow-on to CVE-2026-15583, which stopped the service-account token from leaking to unintended hosts but left the destinations themselves unrestricted; no public exploit identified at time of analysis.
Server-Side Request Forgery in Apache Allura before 1.19.1 lets attackers abuse the project webhook feature to coerce the server into issuing arbitrary outbound HTTP requests, exposing internal services and cloud metadata endpoints. The flaw carries a CVSS 9.1 and is fixed in 1.19.1; it was disclosed via the Apache security team and oss-security on 2026-08-11. There is no public exploit identified at time of analysis and EPSS is low (0.20%, 11th percentile), indicating no observed weaponization yet.
Cleartext storage of API bearer tokens in the self-hosted open-source Typebot chatbot builder (version 3.16.1) lets anyone with read access to the backing database recover every user's builder-API credential verbatim and impersonate that user with no password or MFA. The tokens were persisted with the plaintext value returned by generateId(24) rather than a hash, so a single database disclosure - via SQL injection, an exposed backup, or insider access - yields full account takeover across all tenants. Version 3.17.0 remediates the flaw by SHA-256 hashing tokens at rest; there is no public exploit identified at time of analysis and it is not in CISA KEV.
SQL injection in Adobe Campaign Classic (ACC) v7 through 7.4.3 build 9399 allows a remote attacker to inject crafted SQL and achieve arbitrary code execution in the context of the current user, per Adobe advisory APSB26-123. The flaw is rated CVSS 9.0 (critical) with a scope change, but Adobe notes exploitation depends on conditions beyond the attacker's control (AC:H). No public exploit identified at time of analysis and it is not listed in CISA KEV.
Credential exposure in MongoDB Server's replica-set/sharded-cluster internal authentication allows an adjacent-network attacker to force an authentication-mechanism downgrade during intra-cluster member-to-member connection setup, causing the shared internal keyfile/cluster credential to be sent in a weaker form that can be recovered. Any party with recovered credentials can authenticate as the internal superuser (__system) and gain full control of every node in the deployment. Reported by MongoDB (SERVER-130264); no public exploit identified at time of analysis and it is not listed in CISA KEV.