Server-side request forgery in Friendica through the 2026.08-dev branch exposes internal network infrastructure to any authenticated user, including those with a free self-registered account. The link-preview endpoint fetches attacker-supplied URLs without enforcing an internal IP deny list, enabling enumeration of internal services and access to cloud instance metadata endpoints such as the AWS IMDSv1 endpoint at 169.254.169.254. No public exploit code has been identified at time of analysis, but the low privilege barrier - a free self-registered account - significantly broadens the realistic attacker pool on public Friendica instances.
Server-side request forgery in HumanSignal Label Studio through 1.24.0.dev0 allows authenticated users to direct the server's import-from-URL endpoint to fetch arbitrary internal addresses, including cloud instance metadata services and RFC-1918 private network hosts. The vulnerability exists because the built-in SSRF mitigation flag `SSRF_PROTECTION_ENABLED` defaults to `false`, leaving all default installations exposed without any additional misconfiguration required. No public exploit code or CISA KEV entry has been identified at time of analysis, but the attack pattern is well-understood and requires only valid credentials and standard HTTP requests.
Availability denial-of-service in Samsung's open-source rlottie animation library (all versions per CPE wildcard) allows an unauthenticated remote attacker to crash or hang any application embedding the library by supplying a specially crafted Lottie animation file. The vulnerability stems from missing input-quantity validation across four distinct code paths - precomposition nesting depth, global render-node budgets, Repeater element copy counts, and polystar/polygon point values - each capable of triggering unbounded recursion or resource exhaustion. No public standalone exploit has been identified at time of analysis; upstream fix code is available as GitHub PR #596, though a formally released patched version has not been independently confirmed.
Resource exhaustion in Samsung's rlottie library allows denial of service when parsing crafted Lottie animation files. The library fails to impose limits on precompositional nesting depth, render node counts, repeater copy quantities, and polygon point values, enabling an attacker to supply a malicious .json Lottie file that drives unbounded memory allocation and recursive rendering work. No public exploit code has been identified at time of analysis, but the upstream fix in PR #596 confirms the attack surface is well-understood; applications embedding rlottie for animated content - including Samsung Smart TVs, Tizen-based devices, and any app rendering Lottie animations - are affected across all versions prior to the patch.
Unauthenticated access to Micronaut management endpoints in Kestra prior to 2.0.0-rc6 allows any network-reachable attacker to read fully resolved configuration via GET /env or manipulate runtime log levels via POST /loggers/{name}, bypassing the Basic Auth controls that protect only the primary API on port 8080. The management port (8081) is configured in application.yml with no equivalent authentication gate, making this a structural authentication bypass rather than a misconfiguration edge case. No active exploitation is confirmed (not in CISA KEV) and no public proof-of-concept has been identified at time of analysis.
Command injection in SonicWall Global Management System (GMS) CLI version 9.5.1 and earlier enables a low-privileged user to execute arbitrary system commands with root privileges, constituting a full local privilege escalation on the GMS management host. The flaw is rooted in CWE-94 (Code Injection) within the CLI component, where unsanitized user input reaches a system command interpreter running at elevated privilege. No active exploitation has been confirmed by CISA KEV, no public exploit code has been identified, and SSVC assessment characterizes exploitation status as none with a non-automatable attack path.
Cleartext credential exposure in Red Hat insights-core allows SSSD LDAP bind passwords (ldap_default_authtok) and Pacemaker fence device credentials to be included unredacted in diagnostic archives uploaded to console.redhat.com. The redaction layer uses a naive string-match on the literal key name 'password', leaving non-standard credential field names - such as those used by SSSD and Pacemaker - completely unprotected before archive upload. With CVSS PR:L, a threat actor with authenticated access to an organization's Red Hat Insights console can retrieve these cleartext credentials from stored archives. No public exploit identified at time of analysis and not confirmed in CISA KEV.
Translation API token hijacking in the Ray Enterprise Translation WordPress plugin (≤1.7.3) allows any authenticated user - including low-privilege Subscribers - to overwrite the administrator-configured translation API key via an unprotected AJAX endpoint that performs no capability or nonce checks. Publicly available exploit code exists per WPScan disclosure and SSVC assessment, though EPSS at 0.13% (3rd percentile) reflects limited observed exploitation to date. The primary impact is integrity: a successful attacker can silently substitute a rogue API token, redirecting translation requests through an attacker-controlled account and enabling billing fraud or service disruption without any administrator awareness.
Relative path traversal in Microsoft SharePoint Server exposes arbitrary server-side files to any authenticated network user, with confirmed patches now available across all three affected product lines. The CVSS vector (AV:N/AC:L/PR:L/UI:N) indicates any valid SharePoint account holder can exploit this with low complexity and no victim interaction, resulting in high confidentiality impact. No public exploit code exists at time of analysis and CISA SSVC rates current exploitation as none, though the broad deployment footprint and accessible attack bar warrant prompt patching.
SSRF protection bypass in n8n's MCP Client node allows any authenticated user with workflow creation or editing rights to reach internal or blocked hosts and read responses back through the workflow. The MCP Client node neither routes outbound requests through n8n's SSRF protection layer nor pins the resolved IP address after DNS resolution, undermining the platform's intended network isolation guarantees. Vendor-released patches exist in versions 2.31.5 and 2.32.1; no public exploit code has been identified and the vulnerability is not listed in CISA KEV at time of analysis.
Stored cross-site scripting in Themeum's Kirki Freeform Page Builder plugin (all versions through 6.2.0) allows WordPress users holding Contributor-level access to inject persistent malicious scripts via the post_meta shortcode, which then execute in the browser of any subsequent visitor to the compromised page. The CVSS scope change (S:C) signals that the impact crosses from the contributor's own session boundary into victim sessions, enabling session hijacking, credential exfiltration, or privilege escalation toward site administration. A fix commit is available in the WordPress plugin repository (changeset 3636487), and no public exploit code or CISA KEV listing has been identified at time of analysis.
Certificate validation bypass in SAP Approuter node.js package (versions prior to 23.0.0) enables a low-privileged network attacker holding a certificate from the same trusted CA with matching subject values to impersonate trusted internal components during certain callback flows. The attack path is constrained by high complexity - the attacker must satisfy specific PKI prerequisites - but successful exploitation yields high integrity impact through component impersonation. No public exploit code or CISA KEV listing has been identified at time of analysis.
Privilege escalation in Intel(R) Transfer Learning Tool before version v0.7 stems from a protection mechanism failure (CWE-693) within the Ring 3 user application layer, enabling unauthenticated remote attackers to elevate privileges under specific attack conditions. The flaw affects confidentiality, integrity, and availability at a low severity each, with no subsequent system-level impact confirmed. No public exploit code or CISA KEV listing exists at time of analysis, and Intel has published advisory INTEL-SA-01499 addressing this issue.
DOM-based reflected Cross-Site Scripting in SAP NetWeaver Application Server ABAP enables an authenticated attacker to craft a malicious URL and distribute it to other authenticated SAP users. When a victim accesses the link, unsanitized input is reflected and executed within the DOM in the victim's browser, resulting in high confidentiality impact - such as session token or credential theft - and low integrity impact. No public exploit code or CISA KEV listing exists at time of analysis, placing this in the medium-priority tier despite the high confidentiality component.
SAP NetWeaver AS Java's Adobe Document Services (ADS) component ships outdated open-source cryptographic and data transfer libraries that carry known, unpatched-within-the-product vulnerabilities classified under CWE-1395. Low-privileged authenticated attackers with network access can exploit these library weaknesses to achieve limited impact across confidentiality, integrity, and availability of the affected ADS component. No public exploit code or active exploitation has been identified; this is a supply-chain dependency risk with a CVSS 6.3 Medium score and no indication of weaponization at time of analysis.
Local privilege escalation in Intel PROSet/Wireless WiFi Software for Windows allows unprivileged local code execution by exploiting improper authentication within the device driver layer. An attacker with only local access and no required privileges can bypass authentication checks in the Ring-2 driver tier, ultimately achieving code execution that results in high confidentiality impact on the broader host system alongside low integrity and availability impacts. No public exploit has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.
SQL DDL injection in SAP Social Intelligence (versions 102-109) allows an authenticated low-privilege network attacker to directly execute Data Definition Language commands against the underlying database. Exploitation can alter or destroy database schema objects - a more structurally damaging capability than typical DML injection - with vendor-rated Low impact across confidentiality, integrity, and availability. No active exploitation confirmed at time of analysis and no public exploit identified; patch details are available via SAP Security Note 3766473.
Local privilege escalation and code execution in Intel PROSet/Wireless WiFi Software for Windows arises from an information disclosure flaw (CWE-200) within the Ring 2 device driver layer, exploitable by an unprivileged local user without authentication or user interaction. The vulnerable system itself suffers only low confidentiality impact, but a scope change into the driver subsystem produces high subsequent-system confidentiality impact alongside low integrity and availability impacts - consistent with a privilege escalation chain from user space into driver-controlled memory. No public exploit has been identified at time of analysis and the vulnerability has not been listed in the CISA KEV catalog.
Integer overflow in Adobe's CAI Content Credentials SDK family (Rust, JavaScript, and CLI) allows a local attacker to crash the application, producing a denial-of-service condition. All three components - the Rust c2pa crate, the JS c2pa-web package, and the c2patool command-line utility - share the same CWE-190 root cause and are affected up to their respective boundary versions. No public exploit code or active exploitation has been identified; Adobe has released patched versions for all three components per advisory APSB26-111.
Integer overflow in Adobe's Content Credentials ecosystem - spanning the Rust SDK (c2pa ≤ v0.90.5), JavaScript SDK (@contentauth/c2pa-web ≤ 0.12.0), and the c2patool CLI (≤ v0.27.5) - allows denial-of-service through application crash when processing maliciously crafted C2PA assets. The CVSS:3.1/AV:L vector indicates the exploitable surface is file or data ingestion rather than a directly exposed network service, requiring no user interaction or privileges once a crafted asset reaches the parsing pipeline. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Uncontrolled resource consumption in Adobe's CAI Content Credentials ecosystem (c2patool CLI, Rust SDK, and JS SDK) allows a local attacker to trigger application denial-of-service by supplying crafted input that exhausts system resources. Three distinct release artifacts are affected: the c2patool command-line utility, the c2pa Rust crate, and the @contentauth/c2pa-web JavaScript SDK, all patched in a coordinated Adobe PSIRT disclosure (APSB26-111). No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as 'none' with non-automatable attack conditions.
Integer underflow in Adobe's Content Credentials SDK crashes any application that parses a specially crafted C2PA manifest file, producing a denial-of-service condition. The Rust crate (c2pa ≤0.90.5), JavaScript/WASM package (@contentauth/c2pa-web ≤0.12.0), and CLI tool (c2patool ≤0.27.5) are all affected, with patched releases confirmed by Adobe advisory APSB26-111. No public exploit code and no CISA KEV listing have been identified at time of analysis; real-world impact is highest in automated media ingestion pipelines that validate C2PA provenance on user-supplied files.
Uncontrolled resource consumption in Adobe's Content Credentials ecosystem - spanning the c2patool CLI (≤v0.27.5), Rust SDK c2pa (≤v0.90.5), and JavaScript SDK @contentauth/c2pa-web (≤v0.12.0) - allows a local attacker without elevated privileges to exhaust system resources and cause an application denial-of-service. The vulnerability does not require user interaction, lowering the bar for exploitation in automated pipelines. Adobe has released patches across all three components via advisory APSB26-111, and no public exploit code or active exploitation has been identified at time of analysis.
Integer overflow in Adobe's Content Credentials SDK and CLI toolchain crashes the application when processing crafted input, resulting in a denial-of-service condition. Affected components span the Rust SDK (c2pa), the command-line tool (c2patool), and the JavaScript/WebAssembly SDK (@contentauth/c2pa-web), all at versions prior to their respective patch releases. No public exploit has been identified at time of analysis, and SSVC assesses exploitation as none with non-automatable delivery.
Integer underflow (CWE-191) in Adobe's Content Credentials ecosystem - covering the Rust SDK (c2pa), JavaScript SDK (@contentauth/c2pa-web), and CLI tool (c2patool) - allows a local attacker to crash any application that processes a specially crafted content credential payload, producing a denial-of-service condition. All three components share the underlying parsing logic and are affected up to their respective patch releases. No public exploit or CISA KEV listing has been identified at time of analysis, but the availability of patched versions and a vendor advisory (APSB26-111) confirms vendor-acknowledged impact.
Velociraptor's NTFS parsing library contains out-of-bounds read and memory exhaustion flaws that allow a crash and denial of service when processing maliciously crafted NTFS images. All versions of Rapid7's Velociraptor (cpe:2.3:a:rapid7:velociraptor:*:*:*:*:*:*:*:*) are affected, with meaningful exposure limited to dead disk forensics workflows where untrusted NTFS images are ingested - live filesystem analysis is largely insulated from this attack path. No public exploit code and no confirmed active exploitation have been identified at time of analysis; the local attack vector further constrains real-world exploitation opportunity.
Multiple XSS vulnerabilities in SonicWall Global Management System (GMS) 9.5.1 and earlier allow unauthenticated remote attackers to execute arbitrary JavaScript in authenticated users' browsers. The Changed scope (S:C) in the CVSS vector confirms injected scripts run in the victim browser's security context - not the server - enabling session hijacking, credential theft, or phishing overlays targeting GMS administrators. No public exploit code exists and no CISA KEV listing is present at time of analysis; SSVC classifies exploitation as none.
Prototype pollution in n8n's VM expression engine enables authenticated workflow editors to escape the sandbox and crash the main n8n process by obtaining a reference to a host built-in and corrupting its prototype. Affected versions span the entire 1.x branch prior to 1.123.67 and two 2.x patch lines (before 2.31.5 and 2.32.1), covering both self-hosted deployments and n8n cloud instances using the VM expression engine. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, but the sandbox escape primitive is technically significant and poses meaningful risk in multi-tenant or loosely-governed deployments.
Reflected XSS in Activepieces' OAuth callback endpoint `/api/redirect` allows an unauthenticated attacker to steal session tokens or execute authenticated API calls on behalf of logged-in users. Versions prior to 0.83.0 embed the user-supplied `code` query parameter directly inside an inline `<script>` block, enabling script context breakout via closing tag injection - a flaw the public patch commit fully discloses, substantially lowering the barrier to exploit development. No public exploit code has been identified at time of analysis, and this CVE is not listed in CISA KEV.
Stored cross-site scripting in SAPUI5's content adaptation feature allows a key user with content adaptation privileges to inject persistent malicious scripts into adapted application definitions. When any user subsequently opens the compromised adapted application, the injected script executes in their browser session, enabling session token theft and unauthorized actions on behalf of the victim. Affected versions span multiple SAPUI5 release tracks (754 through 816 and SAP_UI 750); no public exploit or CISA KEV listing has been identified at time of analysis.
XML External Entity (XXE) injection in FreeCAD prior to 1.1.2 allows an attacker who can deliver a crafted .FCStd archive to a user to read arbitrary local files via the file:// URI scheme or trigger server-side requests via the http:// URI scheme when the victim opens the file. The Xerces-C++ SAX2 XMLReader in src/Base/Reader.cpp was instantiated without disabling external entity resolution or external DTD loading, meaning Document.xml embedded inside a .FCStd archive is parsed with full entity expansion enabled. No public exploit is identified at time of analysis, and a vendor-released patch is available in version 1.1.2.
Cross-site scripting in SWC's HTML minifier allows attacker-controlled JSON data embedded in application/json and application/ld+json script elements to break out of those elements and execute arbitrary JavaScript in the rendered page's origin. Applications that use swc_html_minifier or @swc/html to minify server-rendered HTML containing dynamic JSON script blocks are vulnerable - the minifier parsed JSON (unescaping unicode-escaped less-than signs) then re-serialized without re-escaping them, letting a crafted closing sequence terminate the script element prematurely. No public exploit has been identified at time of analysis, but the attack technique is a well-understood HTML parser quirk and the fix commit provides a clear reproduction case.
MongoDB Server's query planner contains a null pointer dereference (CWE-476) that enables any authenticated user holding read-level privileges to crash the server process by submitting a specially crafted query against a collection with a text index. Affected branches span MongoDB 7.0.x, 8.0.x, and 8.3.x, with fixed releases available in 7.0.40, 8.0.29, and 8.3.8 respectively. No public exploit or active exploitation is identified; SSVC rates exploitation as none and the attack is not automatable, though the availability impact is total for the targeted server instance.
Use-after-free in MongoDB Server's geospatial validation subsystem allows an authenticated user with write privileges to crash the database server through concurrent operations against a collection using a specific validator type. Affected branches are MongoDB 7.0 (prior to 7.0.40), 8.0 (prior to 8.0.29), and 8.3.x (prior to 8.3.8), per EUVD advisory EUVD-2026-56913. No public exploit code exists and SSVC assessment indicates no current exploitation activity; patched releases are available from MongoDB.
Path traversal authorization bypass in SAP Approuter (Node.js package, versions prior to 23.0.0) enables a low-privileged authenticated attacker to send specially crafted requests that escape the Approuter's routing authorization controls and reach protected backend destinations beyond their assigned scope. Successful exploitation yields high confidentiality impact - exposure of sensitive backend data - and limited integrity impact through restricted modifications to protected resources, with no effect on availability. No public exploit code or CISA KEV listing has been identified at time of analysis, and exploitation is constrained by high attack complexity per the CVSS AC:H rating.
Authentication bypass in the Device Configuration Framework of Axis OS (CWE-290) enables an already-authenticated attacker holding a viewer-privileged service account to circumvent authorization controls and gain unauthorized access to device configuration with high confidentiality and integrity impact. The vulnerability is network-exploitable but constrained by the requirement for prior authentication and high attack complexity. No active exploitation has been confirmed by CISA KEV, and no public exploit code has been identified at time of analysis.
Denial-of-service in SAP Approuter (SAP Business AI Platform), the node.js routing and authentication gateway for SAP BTP applications, allows remote unauthenticated attackers to crash and restart the component by sending specially crafted input under specific runtime conditions. All versions of the SAP Approuter node.js package prior to 23.0.0 are affected, with high availability impact and no confidentiality or integrity exposure. No public exploit has been identified at time of analysis, and SAP has released a patch via Security Note 3786038.
Sensitive data insertion into log files in Intel Active Management Technology (AMT) and Intel Standard Manageability exposes confidential information to privileged network adversaries. The flaw is classified under CWE-532 and carries a CVSS 4.0 score of 5.9, with high confidentiality impact but no integrity or availability consequences. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, though the network-accessible attack vector and high confidentiality impact make patching a priority for organizations relying on Intel vPro out-of-band management infrastructure.
Insufficient authorization enforcement in the WebSocket layer of SAP Approuter (node.js package < 23.0.0) allows a low-privileged authenticated attacker to reach functionality that should be access-controlled. Successful exploitation yields high confidentiality impact - exposure of sensitive data routed through the Approuter - and limited data modification capability, with no effect on availability. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; however, a vendor-released patch is available and should be prioritized for SAP BTP environments.
Open redirect exploitation in SAP's python-pyodata library (versions before 1.11.2) allows a malicious or compromised OData service to capture sensitive authentication information transmitted by the client and inject untrusted data into the consuming application. Applications using pyodata that connect to externally controlled or attacker-reachable OData endpoints are at risk of credential disclosure and data integrity compromise. No public exploit code has been identified at time of analysis, and the vulnerability has not been listed in CISA KEV, but a vendor-released patch is available at version 1.11.2.
RSA OAEP decryption in the TPM 2.0 specification leaks timing information sufficient for a local privileged attacker to recover plaintext from TPM-managed RSA key operations, including the Endorsement Key. Affected materials include import blobs, credential blobs, and session salts, and successful exploitation may additionally enable forgery of TPM 2.0 platform attestations - a high-value outcome for supply chain and hardware attestation threat actors. No public exploit is identified at time of analysis, and the EPSS score of 0.19% (9th percentile) reflects low current exploitation probability, though the cryptographic sensitivity of targeted assets and the Scope:Changed metric elevate real-world risk well beyond what the moderate CVSS score alone conveys.
Cross-tenant authorization bypass in ToolJet's Database HTTP API allows authenticated users of any workspace to access and manipulate database tables belonging to other organizations by substituting a victim's organizationId into the URL path. All ToolJet installations prior to version 3.20.207-lts running multi-tenant configurations with the ToolJet Database feature enabled are affected. An attacker holding a valid account on any workspace can enumerate foreign table schemas, extract row data, and perform destructive operations including table creation, alteration, bulk population, and deletion across organizational boundaries. No public exploit has been identified at time of analysis.
Double-free (CWE-415) and use-after-free read (CWE-416) vulnerabilities in the Realtek BEE Bluetooth HCI driver within Zephyr RTOS expose affected devices to memory pool corruption and likely crashes when an adjacent Bluetooth peer drives heavy transmit activity toward resource-exhaustion error conditions. The bt_hci_bee_send() function in hci_bee.c violated the bt_hci_driver_api buffer-ownership contract by routing all error exits through a shared cleanup label that unconditionally called net_buf_unref(), while the Zephyr host TX path also unrefs the buffer on error return - resulting in a double free of the same net_buf and a subsequent read of freed memory via a LOG_ERR call compiled in at the default error log level. An upstream fix is confirmed via Zephyr project commit 9a684b5c314fb1d8670b01f7b6c4450a9353906c; no formally released patched version has been independently confirmed, and no public exploit has been identified at the time of this analysis.
Double-free corruption in Zephyr RTOS's Bouffalo Lab BLE HCI driver crashes the BLE stack on any device using a BL60x/BL70x/BL61x on-chip controller. The driver's bt_bflb_send() unconditionally consumed a net_buf reference on all error paths via a shared 'done' label, violating the bt_hci_driver_api contract that reserves unref responsibility for the caller on failure; the subsequent caller-side unref then double-decrements the reference count, prematurely freeing a parent TX buffer that remains reachable on the connection queue and corrupting the shared net_buf pool. No public exploit identified at time of analysis; EPSS data was not supplied, and CISA KEV listing is absent.
MongoDB Server's sharded cluster transaction coordination is vulnerable to an authorization bypass that allows an authenticated, low-privileged user with direct adjacent-network access to a shard process to illegitimately commit or abort in-progress prepared transactions - actions that are normally reserved for the designated transaction coordinator. Exploitation can produce cross-shard data inconsistency, cluster clock corruption, and broken atomicity guarantees across the distributed database. No public exploit code exists and SSVC confirms no active exploitation; however, successful abuse could silently corrupt application-layer data integrity across the cluster.
Session integrity bypass in SAP Approuter (node.js package versions prior to 23.0.0) enables an authenticated low-privilege attacker to hijack another user's session by sending crafted requests that circumvent header integrity verification on certain code paths. Exploitation demands prior out-of-band observation of the target's session values, constraining this to determined, targeted attackers rather than opportunistic mass exploitation. No public exploit code and no CISA KEV listing identified at time of analysis, but successful exploitation yields full read access to the victim's session context with a high confidentiality impact per CVSS.
Use-after-free in the kernel-mode (Ring 0) driver component of Intel PROSet/Wireless WiFi Software for Windows enables a local denial-of-service condition by crashing the affected system. The flaw resides in the most privileged execution ring on x86/x64, meaning a successful trigger causes a kernel panic (BSOD) with no containment boundary below the OS. No active exploitation has been confirmed by CISA KEV, no public exploit code has been identified at time of analysis, and the combination of local-only access with high attack complexity substantially constrains real-world risk.
Ente 2of3's version 1 card format undermines the information-theoretic guarantee of Shamir secret sharing by storing the secret's byte length and a 32-bit FNV-1a checksum in cleartext on every card, enabling single-card offline attacks. Any party who obtains or photographs one of the three recovery cards - a scenario the scheme was explicitly designed to render harmless - can enumerate low-entropy or predictable candidate secrets against the exposed checksum without needing a second card. The vulnerability affects all 2of3 cards generated before version 2026.07.28; no public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV.
Cross-user module cache poisoning in n8n's JavaScript task runner allows an authenticated Code-node user to inject malicious logic into a shared module cache, silently altering other users' workflow executions on the same instance and compromising their data confidentiality, workflow integrity, or execution availability. Affects all multi-user n8n deployments on versions before 1.123.67 (1.x), 2.31.5 (2.31.x), and 2.32.1 (2.32.x) where the JS task runner is active and built-in or external module access is enabled. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; despite the 'RCE' tag applied by the reporting source, the vendor advisory explicitly confirms this is a cross-user isolation break and not a sandbox escape or remote code execution.
Server-Side Request Forgery in kkFileView before 5.0.1 allows unauthenticated remote attackers to make the application server issue HTTP requests to arbitrary internal or external URLs via the unprotected /addTask endpoint. The vulnerability arises because /addTask was excluded from both TrustHostFilter and TrustDirFilter in WebConfig.java, and the fullfilename parameter can be manipulated to coerce file type classification as OFFICE, COMPRESS, or CAD, triggering FileConvertQueueTask to fetch attacker-chosen URLs. No public exploit identified at time of analysis per CISA KEV; however, SSVC flags a publicly available POC and marks the vulnerability as automatable.