Use-after-free in Siemens Solid Edge SE2025 and SE2026 enables arbitrary code execution in the context of the current process when a user opens a specially crafted DFT file. Both affected annual release branches are vulnerable until patched - SE2025 prior to V225.0 Update 15 and SE2026 prior to V226.0 Update 7 - as confirmed by Siemens Security Advisory SSA-621657. No public exploit or active exploitation has been identified at time of analysis; the CVSS 4.0 AC:H rating indicates non-trivial exploit development is required.
Use-after-free memory corruption in Siemens Solid Edge SE2025 and SE2026 allows code execution in the context of the current user process when a specially crafted DFT (draft) file is parsed. Affected are all SE2025 releases prior to V225.0 Update 15 and all SE2026 releases prior to V226.0 Update 7, as confirmed by Siemens advisory SSA-621657. No public exploit code or active exploitation has been identified at time of analysis, and the local attack vector combined with required user interaction meaningfully constrains real-world exposure.
Out-of-bounds write in Siemens Solid Edge SE2025 and SE2026 allows code execution within the application process when a user opens a specially crafted DFT file. The vulnerability resides in the DFT file parser and can deliver full confidentiality, integrity, and availability impact on the vulnerable system if a victim is induced to open a malicious file. No public exploit identified at time of analysis, and the product is not listed in CISA KEV; however, Siemens has released patched versions and published advisory SSA-621657.
Out-of-bounds read in Siemens Solid Edge SE2025 and SE2026 enables code execution within the application process when a victim opens a specially crafted DFT (Draft) drawing file. Siemens confirmed and patched the vulnerability via Product CERT advisory SSA-621657, with fixes delivered in SE2025 V225.0 Update 15 and SE2026 V226.0 Update 7. No public exploit code or active exploitation has been identified at time of analysis, but the file-parsing attack vector is consistent with targeted document-delivery threats directed at engineering and manufacturing organizations.
Authorization bypass in Commvault CommServe allows remote attackers to invoke a limited set of command-execution operations without passing the intended authorization checks, per Commvault security advisory CV_2026_07_9. The flaw carries a CVSS 4.0 base score of 9.2 with high impact to confidentiality, integrity, and availability, and affects Commvault Cloud deployments across the CommServe, Web Server, Command Center, MediaAgents, Clients, and HyperScale X components. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authorization bypass in Commvault CommServe permits attackers to circumvent the command-execution allowlist, gaining unsanctioned command execution across the backup-management control plane. Because CommServe orchestrates the entire Commvault environment, a successful bypass can cascade to Webservers, Command Center, Media Agents, Clients and HyperScale X, threatening confidentiality, integrity and availability of protected data. Rated CVSS 4.0 9.2 (critical) by Commvault; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Fail-open security logic in Visual Studio Code permits network-based security feature bypass by an unauthenticated attacker who can induce user interaction. The root cause is CWE-636: when the application encounters an error or edge condition in a security enforcement path, it defaults to granting rather than denying access, neutralizing the intended control. With a CVSS score of 8.2 and a scope-changed vector (S:C) paired with high confidentiality impact, successful exploitation could expose data or capabilities beyond the direct VS Code process boundary. No public exploit code or CISA KEV listing has been identified at time of analysis.
Arbitrary local file read in Stanford NLP's DSPy 3.3.0b1 lets an attacker who controls or influences language-model completions exfiltrate host files by returning an Image or Audio typed output whose url field contains a local filesystem path. When JSONAdapter or ChatAdapter parse the completion, the framework reads and base64-encodes the referenced file and embeds it in the next outbound prompt to the attacker-controlled model endpoint. Reported by VulnCheck with a CVSS 4.0 base of 9.2; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthorized BLE command injection against the Pulsetto Vagus Nerve Stimulator firmware allows any physically proximate attacker to invoke hidden device commands without authentication or encryption, with potential to alter stimulation parameters or disrupt device operation. The firmware processes a set of undisclosed commands - never exposed through the official companion mobile application - whenever the device is powered on and advertising over BLE, presenting a zero-authentication attack surface at the radio layer. No public exploit code has been identified at time of analysis, but the adjacent-only, no-authentication requirement makes opportunistic abuse practical in any clinical or public setting where patients wear the device.
Remote code execution via double free (CWE-415) in the Windows Secure Socket Tunneling Protocol (SSTP) service enables a network-adjacent, unauthenticated attacker to corrupt heap memory and execute arbitrary code. The vulnerability spans virtually every supported Windows Server and Windows 10/11 release, from Server 2012 through Server 2025 and Windows 11 26H1, making the remediation footprint extremely broad. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the CVSS AC:H rating indicates exploitation requires specific race or protocol conditions rather than a trivial spray-and-pray approach.
Remote code execution in Crafty Controller (crafty-4), a web-based management panel for Minecraft servers, arises from path traversal in the server-import and admin file-upload features that lets an authenticated user write files to arbitrary filesystem paths accessible to the application. By planting a file in an executable or auto-loaded location, a low-privileged authenticated attacker can escalate to code execution in the context of the Crafty Controller process. No public exploit has been identified at the time of analysis, and the issue is not listed in CISA KEV; EPSS data was not provided.
OS command execution in SAP Manufacturing Integration and Intelligence (MII) lets an already-highly-privileged application user submit crafted input to affected functionality that is passed to the operating system without sufficient validation (CWE-94 code injection). Because exploitation crosses from the application into the underlying host (scope change), a successful attack yields full confidentiality, integrity, and availability impact on the server, not just the app. The issue was reported by SAP and carries a 9.1 CVSS; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Unauthenticated remote code execution in SonicWall Global Management System (GMS) 9.5.1 (Build 9510.1044) and earlier lets remote attackers read sensitive data and write arbitrary files through a Zip-Slip path-traversal flaw during archive extraction, which can be leveraged to plant executable content and achieve code execution. The issue was disclosed by SonicWall PSIRT (SNWLID-2026-0011) and carries a CVSS 9.1 (Critical) rating. There is no public exploit identified at time of analysis, and CISA SSVC records exploitation status as 'none'.
SQL injection in Twenty, an open-source CRM platform, lets a workspace administrator holding the DATA_MODEL permission inject arbitrary PostgreSQL into the DDL of the system searchVector TS_VECTOR field. By supplying a crafted settings.asExpression via PATCH /rest/metadata/fields/:id or the updateOneField GraphQL mutation, the attacker breaks out of the GENERATED ALWAYS AS (...) column clause and executes statements as the application database user, compromising all workspace data. It is fixed in 2.15.0, requires authenticated high-privilege access (CVSS 9.1, PR:H), and has no public exploit identified at time of analysis.
Privilege escalation via heap-based buffer overflow in the Windows Kernel (CWE-122) affects a broad span of Windows 10, Windows 11, and Windows Server releases from 2016 through 2025. An authenticated local attacker exploiting this flaw can gain SYSTEM-level privileges, achieving full control over confidentiality, integrity, and availability of the target system. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis; a vendor patch is available.
Remote code execution in Microsoft SharePoint Server allows a network-authenticated attacker with low-level privileges to execute arbitrary code by exploiting unsafe deserialization of attacker-controlled data. Both SharePoint Server 2019 and the Subscription Edition are confirmed affected, with patches available from Microsoft. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low complexity and full-triad impact (C:H/I:H/A:H) make this a high-priority patching target for enterprise environments.
Server-side request forgery in Grafana's mcp-grafana (Grafana MCP Server) lets an authenticated caller override the outbound request destination via the X-Grafana-URL header while using the grafana_api_request tool to control HTTP method, path, and body. Because the destination is never constrained to the configured Grafana instance, callers can pivot the server into internal, loopback, and link-local services-including cloud metadata endpoints-and read the responses. This is an incomplete-fix follow-on to CVE-2026-15583, which stopped the service-account token from leaking to unintended hosts but left the destinations themselves unrestricted; no public exploit identified at time of analysis.
Server-Side Request Forgery in Apache Allura before 1.19.1 lets attackers abuse the project webhook feature to coerce the server into issuing arbitrary outbound HTTP requests, exposing internal services and cloud metadata endpoints. The flaw carries a CVSS 9.1 and is fixed in 1.19.1; it was disclosed via the Apache security team and oss-security on 2026-08-11. There is no public exploit identified at time of analysis and EPSS is low (0.20%, 11th percentile), indicating no observed weaponization yet.
Mira hormone monitor device firmware exposes an unauthenticated BLE characteristic write path that forces the device into bootloader mode when any adjacent BLE central sends a 0x01 value, with no credential verification required. Disclosed via CISA ICS Medical Advisory ICSMA-26-223-01, the vulnerability maps to CWE-306 (Missing Authentication for Critical Function) and carries a CVSS 4.0 score of 7.1 with high availability impact. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but the attack requires only commodity BLE hardware and physical proximity.
Cleartext storage of API bearer tokens in the self-hosted open-source Typebot chatbot builder (version 3.16.1) lets anyone with read access to the backing database recover every user's builder-API credential verbatim and impersonate that user with no password or MFA. The tokens were persisted with the plaintext value returned by generateId(24) rather than a hash, so a single database disclosure - via SQL injection, an exposed backup, or insider access - yields full account takeover across all tenants. Version 3.17.0 remediates the flaw by SHA-256 hashing tokens at rest; there is no public exploit identified at time of analysis and it is not in CISA KEV.
Authorization bypass in Malcolm (all versions prior to 26.07.0) allows authenticated low-privilege users to access restricted backend endpoints by exploiting a URI normalization mismatch between Nginx's routing layer and the OpenResty Lua RBAC enforcement layer. By prepending a traversal segment (e.g., `/x/../upload/...`) to a request path, the Lua role check evaluates the raw unnormalized URI, fails to match any configured rule, and falls open - granting access the policy should deny. No public exploit has been identified at time of analysis, and CISA has released a fix in v26.07.0.
Server-impersonation via broken TLS hostname verification affects Apache HttpComponents Client 5.4 through 5.6.3 when applications use the asynchronous HttpClient, where the HostnameVerificationPolicy#BUILTIN setting is silently ignored. An adversary positioned to intercept and modify network traffic can present a valid certificate issued for an unrelated domain and the async client will accept it, defeating the core TLS server-identity check and exposing transmitted data. There is no public exploit identified at time of analysis and EPSS is very low (0.09%), but the CVSS base score is 9.1 and the classic (synchronous) HttpClient is explicitly unaffected.
Remote code execution in Microsoft Office SharePoint exploits unsafe deserialization of attacker-controlled data over the network. An authenticated attacker with low-level network access can submit a crafted serialized payload that SharePoint deserializes without sufficient validation, resulting in full compromise of confidentiality, integrity, and availability. No public exploit has been identified at time of analysis, but the low attack complexity and high impact across all three security properties make this a critical remediation priority.
Remote code execution in Microsoft Office SharePoint enables any authenticated low-privileged user to execute arbitrary code on the server by submitting maliciously crafted serialized data over the network. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms the attack requires no user interaction, low complexity, and only a standard SharePoint account - making this straightforward to weaponize within any organization whose SharePoint is network-accessible to internal users or external authenticated parties. No public exploit code or CISA KEV listing is identified at time of analysis, though SharePoint deserialization vulnerabilities have historically attracted rapid weaponization.
SQL injection in Adobe Campaign Classic (ACC) v7 through 7.4.3 build 9399 allows a remote attacker to inject crafted SQL and achieve arbitrary code execution in the context of the current user, per Adobe advisory APSB26-123. The flaw is rated CVSS 9.0 (critical) with a scope change, but Adobe notes exploitation depends on conditions beyond the attacker's control (AC:H). No public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in Microsoft Office SharePoint allows an attacker authenticated with low privileges to execute arbitrary code over a network via unsafe deserialization of user-controlled data. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms full confidentiality, integrity, and availability impact with no user interaction required. No public exploit code has been identified at time of analysis, and SharePoint is not currently listed in the CISA KEV catalog based on available data.
Credential exposure in MongoDB Server's replica-set/sharded-cluster internal authentication allows an adjacent-network attacker to force an authentication-mechanism downgrade during intra-cluster member-to-member connection setup, causing the shared internal keyfile/cluster credential to be sent in a weaker form that can be recovered. Any party with recovered credentials can authenticate as the internal superuser (__system) and gain full control of every node in the deployment. Reported by MongoDB (SERVER-130264); no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in FileRun ≤2026.2.0 is achievable by any authenticated user who can upload files, exploiting a shell command injection flaw in the thumbnail generation pipeline. The subsystem passes uploaded filenames wrapped in double-quotes directly to exec() without escapeshellarg() sanitization, meaning filenames such as $(PAYLOAD).mp4 survive the filename sanitizer and are evaluated as shell commands when ffmpeg, ImageMagick, vips, or stl-thumb processes the upload. Vendor-released patch 2026.2.1 is available; no CISA KEV listing or public exploit code has been identified at time of analysis, but the low-complexity, authenticated-only barrier makes this a high-priority patch target for any FileRun deployment.
Remote code execution in Microsoft SharePoint allows any authenticated, low-privileged network attacker to execute arbitrary code on the server by exploiting unsafe deserialization of attacker-controlled data (CWE-502). Three on-premises SharePoint Server product lines are confirmed affected - Enterprise Server 2016, Server 2019, and Server Subscription Edition - with fixed builds available from Microsoft. No public exploit code has been identified at time of analysis, but the low attack complexity and precedent of prior SharePoint deserialization CVEs being rapidly weaponized (e.g., CVE-2019-0604) make this a high-priority patching target for any organization running on-premises SharePoint.
Remote code execution in Microsoft SharePoint Server exposes organizations to full system compromise via deserialization of attacker-controlled data submitted over the network. Versions across three SharePoint Server editions (Subscription Edition, 2019, and Enterprise 2016) are confirmed affected, all requiring only a low-privileged authenticated account to exploit. No public exploit code or CISA KEV listing is identified at time of analysis, but the low attack complexity and high impact across confidentiality, integrity, and availability make this a critical-priority remediation item for any enterprise SharePoint deployment.
Hardcoded AES encryption in Siemens LOGO! Soft Comfort (all versions before V9) exposes every password-protected project file to decryption without knowledge of any user-defined password. A local attacker who can access the application installation - via shared workstation access, insider position, or post-compromise foothold - can extract the static master key from binaries or process memory and apply it universally to any project file ever encrypted by the affected software. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
LOGO! Soft Comfort, Siemens' programming environment for LOGO! small programmable logic controllers, stores project protection passwords as unsalted SHA-256 hashes, enabling efficient offline recovery attacks against anyone who obtains a project file. All versions prior to V9 are affected according to Siemens advisory SSA-751328. An attacker who acquires the project file - through file system access, network share exposure, backup theft, or insider access - can bypass password protection by cracking the hash offline without rate-limiting or account lockout constraints. No public exploit has been identified at time of analysis, and exploitation is not confirmed in CISA KEV.
Remote code execution in Microsoft Active Directory Certificate Services (AD CS) is achievable by low-privileged authenticated network attackers through a use-after-free (CWE-416) memory corruption flaw. All supported Windows Server versions from 2012 through 2025 are affected, along with Windows 10 versions 1607 and 1809. Microsoft has released patches via the MSRC update guide; no public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity and broad version coverage make this a high-priority remediation item.
Privilege escalation in Microsoft High Performance Computing (HPC) Pack allows a network-authenticated attacker with low-privilege access to elevate privileges to a higher level, potentially achieving full system compromise. The flaw stems from CWE-250 (Execution with Unnecessary Privileges), meaning a component within HPC Pack runs with more rights than its function requires, providing a lever for a legitimately authenticated user to abuse. No public exploit code has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog, but the CVSS 8.8 score and full C/I/A impact triad indicate a serious risk in any environment where untrusted low-privilege users have network access to HPC Pack services.
Remote code execution in Windows SMB Server is achievable by a network-authenticated attacker exploiting a heap-based buffer overflow (CWE-122). The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms that low-privileged, network-accessible credentials are sufficient - no user interaction or elevated rights are required. The vulnerability affects a broad range of Windows client and server releases from Windows Server 2012 through Windows 11 26H2 and Windows Server 2025, with vendor patches now available. No public exploit code or CISA KEV listing has been identified at time of analysis.
Remote code execution in Microsoft's Local Security Authority Server (lsasrv) affects virtually every supported Windows client and server release, from Windows Server 2012 through Server 2025 and Windows 10 through Windows 11 26H1. The heap-based buffer overflow (CWE-122) is reachable over the network by any low-privileged authenticated attacker - aligning with the CVSS PR:L designation and the description's 'authorized attacker' language - enabling full system compromise. No public exploit identified at time of analysis; vendor patch is available via MSRC.
Remote code execution in Microsoft Dynamics 365 on-premises is achievable by any authenticated low-privileged user via a crafted deserialization payload sent over the network, yielding full confidentiality, integrity, and availability compromise of the affected host. The root cause is CWE-502 (Deserialization of Untrusted Data), a class of vulnerability historically weaponized effectively in .NET-based enterprise applications through gadget chains. No public exploit code or CISA KEV listing was identified at the time of analysis, but the combination of low attack complexity, low privilege requirement, and high CIA impact makes this a credible, high-priority remediation target for organizations running Dynamics 365 on-premises.
Heap-based buffer overflow in the Windows LDAP client implementation enables remote code execution against any Windows system that initiates an LDAP connection to an attacker-controlled server. The vulnerability spans an exceptionally wide set of affected Windows versions - from Windows Server 2012 through Windows 11 26H1 and Windows Server 2025 - making the potential attack surface very large. Microsoft has released patches via the standard update channel; no public exploit code or CISA KEV listing has been identified at time of analysis, though the PR:N/UI:R vector and high CIAlll impact make this a credible priority for patching.
Command injection in Windows Active Directory enables network-based remote code execution against a broad range of Windows client and server versions, from legacy Server 2012 through Windows 11 26H1 and Server 2025. With a CVSS 8.8 and a vector of AV:N/AC:L/PR:N/UI:R, an unauthenticated remote attacker can execute arbitrary commands on affected systems when a local user performs a triggering action - such as processing a crafted request or interacting with attacker-controlled content that reaches the vulnerable AD component. No public exploit or CISA KEV listing has been identified at time of analysis, but Microsoft has released patches across all affected branches.
Privilege escalation in Microsoft SharePoint Server (2016 Enterprise, 2019, and Subscription Edition) allows a low-privileged authenticated attacker to gain elevated access over the network by invoking a critical internal function that lacks proper authentication enforcement. The flaw (CWE-306) is exploitable with low complexity and no user interaction, resulting in full confidentiality, integrity, and availability impact. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low exploitation complexity against a widely-deployed enterprise platform makes this a priority patching target.
Protection mechanism failure in Intel Data Center Attestation Primitives (Intel DCAP) enables unauthenticated network-based attackers with specialized internal knowledge to undermine the integrity of the attestation system and expose confidential data from downstream systems relying on SGX enclave verification. The vulnerability (CWE-693) is particularly impactful in confidential computing environments where DCAP serves as the trust anchor for SGX workload isolation. No public exploit has been identified at time of analysis, and Intel has published advisory INTEL-SA-01449 addressing this issue.
SQL injection in Microsoft Entra Connect (versions 1.0.0 through below 2.6.84.0) enables local low-privileged users to escalate privileges on the host system, achieving full confidentiality, integrity, and availability impact. The CVSS vector (AV:L/PR:L) confirms that physical or remote shell access with a standard user account is the entry point - no administrative rights required to trigger the flaw. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity and high impact make this a credible lateral-movement or persistence risk in hybrid identity environments.
Brute-force credential attacks against Mira's cloud authentication endpoints are unrestricted due to the complete absence of per-account rate limiting, per-IP throttling, and account lockout controls, as disclosed in CISA ICS Medical Advisory ICSMA-26-223-01. Affected products include Mira Firmware 1.7.1.47 and Mira Android App 4.5.15.4 from Quanovate Tech Inc. (operating as Mira / Mira Care), a healthcare-focused IoT platform. An unauthenticated remote attacker can systematically enumerate credentials at arbitrary scale to gain unauthorized access to user accounts, with no public exploit code or CISA KEV listing identified at time of analysis.
Session token exposure in the Mira Android app (Quanovate Tech Inc.) leaks live authentication credentials to third-party web properties and referrer logs whenever users trigger in-app WebView flows such as shop redirects. The app appends the active session token as a URL query string parameter and embeds a persistent user identifier in the WebView User-Agent header, both of which are transmitted to any destination or JavaScript context receiving that traffic. Reported by ICS-CERT under medical advisory ICSMA-26-223-01, this vulnerability affects a healthcare-adjacent platform, amplifying the sensitivity of exposed credentials; no public exploit code or CISA KEV listing has been identified at time of analysis.
Account takeover in n8n before 2.32.1 (and before 2.31.5 in the prior release line) is enabled by two simultaneous omissions in the Token Exchange Embed Login feature: the platform accepts an incoming JWT's email claim without confirming the issuer has cryptographically verified that address, and it does not enforce the trusted key's configured role ceiling against the matched local account. An attacker able to obtain any validly-signed token from a configured trusted issuer - including issuers that routinely emit unverified email addresses as part of their standard flows - can present that token with a victim user's email and be granted a fully authenticated n8n session with complete account control. No public exploit has been identified at time of analysis; however, the vulnerability is exploitable in straightforward steps once both deployment preconditions are satisfied.
Privilege escalation in Microsoft Exchange Server 2016, 2019, and Subscription Edition allows authenticated network attackers to gain elevated privileges through resource injection (CWE-99), earning a CVSS 8.8 High rating with total technical impact across confidentiality, integrity, and availability. Affected deployment tracks span Exchange 2016 CU23 (below 15.01.2507.072), Exchange 2019 CU14 and CU15, and Exchange SE RTM, with vendor patches confirmed available for all tracks. No public exploit code has been identified at time of analysis, and SSVC assessment reports no observed exploitation, though the authenticated-only barrier is easily bypassed via credential theft and the total SSVC technical impact classification warrants prompt action.
Remote code execution in PrefectHQ Prefect through version 3.8.2 allows authenticated users to inject arbitrary git arguments via the unsanitized `branch` field of the `git_clone` pull step, enabling arbitrary command execution on the Prefect server. This vulnerability is a distinct bypass of the incomplete fix applied for CVE-2026-5366, meaning the earlier remediation left the underlying code path exploitable by a different injection technique. No public exploit or CISA KEV listing has been identified at time of analysis, but the low-complexity network vector and authenticated-user scope make this high-priority for any organization running self-hosted Prefect orchestration infrastructure.
Code injection (CWE-94) in Microsoft SharePoint Server exposes authenticated network users to high-impact compromise across confidentiality, integrity, and availability on unpatched servers running SharePoint 2016 Enterprise, 2019, or Subscription Edition. The CVSS 8.8 rating (AV:N/AC:L/PR:L) reflects network exploitation requiring only low-privileged credentials, though the CVE description characterizes the primary effect as spoofing rather than full remote code execution - a tension that deserves verification against the Microsoft MSRC advisory. No public exploit code and no CISA KEV listing have been identified at time of analysis, and SSVC rates exploitation as none and automatable as no, moderating the immediate response urgency.
Remote code execution in ZoneMinder 1.39.17 and earlier allows any authenticated user - regardless of assigned role - to execute arbitrary OS commands by exploiting a broken permission check in the Filter class. The flaw arises because `canEdit()` and `canDelete()` invoke nonexistent methods on the `ZM\User` class, causing PHP's `__call()` magic method to silently return a truthy value and bypass all role-based authorization for filter operations. No public exploit code or CISA KEV listing has been identified at time of analysis, but the extremely low exploitation bar - any valid account suffices - makes this a high-priority remediation target for all ZoneMinder deployments.
Remote code execution in Fusio 8.8.3 allows authenticated Developer-role users to escape the PHP-Sandbox and execute arbitrary OS commands on the server. The root cause is a CWE-78 OS Command Injection flaw: the sandbox allow-list permits PHP functions that transitively invoke system(), enabling full sandbox escape. With a valid Developer-role account, an attacker can achieve complete server compromise. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the low attack complexity and network accessibility elevate priority for any Fusio deployment where Developer accounts are granted to untrusted parties.