Null pointer dereference in Adobe's Content Credentials SDKs (Rust SDK ≤c2pa-v0.90.5, JS SDK ≤@contentauth/c2pa-web@0.12.1, CLI tool ≤c2patool-v0.27.5) enables unauthenticated remote attackers to crash any application built on these libraries by supplying a crafted C2PA media payload. The CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms straightforward remote exploitation with zero prerequisites or user involvement. No active exploitation has been confirmed in CISA KEV and no public exploit code has been identified at time of analysis; vendor-released patches are available for all three SDK components.
Incorrect Authorization (CWE-863) in Adobe Commerce and Magento Open Source allows remote unauthenticated attackers to bypass security controls and gain unauthorized read access to protected resources. Affected are all major supported branches of Adobe Commerce (2.4.4 through 2.4.9-2026-jul), Adobe Commerce B2B (1.3.3 through 1.5.3-2026-jul), and Magento Open Source (2.4.6 through 2.4.9-2026-jul). No public exploit has been identified at time of analysis, though the CVSS:3.1 AV:N/AC:L/PR:N/UI:N profile makes this trivially exploitable at scale once a technique is known.
Unauthenticated remote directory listing in deepwiki-open through commit 16f35a0 allows any network-accessible attacker to enumerate arbitrary filesystem paths on the host by supplying absolute path parameters to the local-repository structure endpoint. The root cause is a combination of missing input path restriction (CWE-22) and an authentication layer that is disabled by default (WIKI_AUTH_MODE=false), meaning every default deployment is immediately vulnerable without any configuration change. No public exploit has been identified at time of analysis, but the zero-authentication, low-complexity attack surface makes this trivially exploitable against any internet-exposed instance.
Information disclosure in OpenSignLabs OpenSign through 2.37.0 exposes complete organisation tenant records to unauthenticated remote attackers via the gettenant Parse cloud function. The function accepts a contactId parameter and returns the full tenant configuration record without any authentication or authorization check, enabling systematic enumeration of all tenant data across a multi-tenant deployment. No public exploit has been identified at time of analysis, but the trivial attack complexity (AV:N/AC:L/PR:N/UI:N) means no specialised tooling is required.
Unauthenticated contact record enumeration in OpenSignLabs OpenSign through 2.37.0 exposes all stored personally identifiable information to remote attackers without credentials. The `getcontact` Parse cloud function executes with `useMasterKey`, which bypasses Parse Server's native access control layers (ACLs and Class-Level Permissions), and contains no compensating authentication or authorization logic. Any network-reachable attacker can call this function, supply arbitrary object IDs, and retrieve full contact records including PII at scale. No public exploit has been identified at time of analysis, and no KEV listing exists.
Server-side request forgery in Dub's metatags edge endpoint allows unauthenticated remote attackers to direct the server to issue HTTP requests to arbitrary internal or external hosts. All Dub versions through 2026-07-10 are affected, with the root cause being the endpoint's acceptance of caller-supplied URLs without any denylist filtering or authentication requirement. Attackers can leverage this to probe RFC 1918 address space, enumerate internal services, or exfiltrate credentials from cloud metadata endpoints such as AWS IMDSv1; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Authentication bypass in Red Hat's search-v2-api exposes federated search results to unauthenticated remote attackers. The authentication middleware unconditionally skips validation when an HTTP request carries the `Upgrade: websocket` header, allowing any network-reachable attacker to POST to the `/federated` endpoint without credentials. Exploitation yields information disclosure across all configured remote managed hubs - no active exploitation confirmed (not in CISA KEV) and no public POC identified at time of analysis, but the CVSS 7.5 score and PR:N vector reflect low-barrier, network-accessible exploitation.
Unauthenticated remote write to any contact record is possible in OpenSignLabs OpenSign through version 2.37.0 via the updatecontacttour Parse cloud function, which performs no authentication or authorization checks before accepting and applying updates to arbitrary contact records. Any internet-reachable deployment is vulnerable to data corruption or overwrite of contact records for all users system-wide without credentials. No public exploit code or CISA KEV listing has been identified at time of analysis, though the vulnerability's zero-prerequisites nature and straightforward exploitation model make it a realistic target for automated abuse.
Unauthenticated remote memory exhaustion in Undertow's WebSocket subsystem enables denial of service against any deployed application exposing a Jakarta @ServerEndpoint with an @OnMessage handler. An attacker needs only a standard WebSocket handshake - no credentials, no special tooling - to trigger unbounded Out of Memory conditions on the server. No public exploit code has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the zero-prerequisite attack vector (CVSS AV:N/AC:L/PR:N/UI:N) makes exploitation trivially automatable against any reachable Undertow instance.
Unauthenticated remote access to all contact form submissions, including personally identifiable information, is possible in CSZ CMS 1.3.2 due to a broken access control flaw in the admin form-submission viewer. The endpoint omits an authentication check entirely, and the underlying framework authentication helper fails open rather than denying access by default - meaning the bypass is a structural failure, not a simple missing decorator. No public exploit code or active exploitation has been identified at time of analysis, but the trivial exploitation conditions (no credentials, no special configuration) make this a realistic data-exposure risk for any internet-facing CSZ CMS deployment.
Unauthenticated remote access to invoice PDFs in IDURAR ERP CRM 4.1.0 and earlier exposes customer PII due to the /download Express router being mounted globally without authentication middleware, constituting a broken access control flaw (CWE-284). Any internet-reachable attacker can retrieve financial documents by enumerating MongoDB ObjectIds, requiring no credentials, session token, or user interaction. No active exploitation has been confirmed via CISA KEV, and no public exploit code is identified in the available intelligence, though the attack requires only basic HTTP requests and ObjectId pattern knowledge.
Unauthenticated exposure of live task execution data in Kestra prior to 2.0.0-rc6 allows any network-accessible party to retrieve plaintext credentials, environment variables, HTTP headers, and connection strings via an unprotected GET /worker endpoint on the worker process. While the main Kestra API on port 8080 enforces authentication, the worker's WorkerEndpoint.java endpoint was not subject to the same controls, serializing the full live Task object to unauthenticated callers. The vendor-released fix is confirmed in version 2.0.0-rc6; no public exploit code has been identified at time of analysis.
Uncontrolled heap allocation in WildFly's CSIv2Util GSS token decoder allows a remote unauthenticated attacker to trigger OutOfMemoryError by supplying a crafted length field, crashing or destabilizing the Java application server. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms no authentication or user interaction is required, making this a trivially exploitable denial-of-service condition against any WildFly deployment with an accessible IIOP endpoint. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.
Denial of service in Red Hat JBoss Enterprise Application Platform's jboss-remoting component allows any remote unauthenticated attacker who can reach application or management ports to exhaust server memory through a crafted protocol handshake. By completing an Upgrade: jboss-remoting handshake on ports 8080, 9990, or 4447, an attacker triggers an integer overflow (CWE-190) that causes uncontrolled heap allocation, inducing OOM errors that degrade or halt request processing server-wide. No public exploit has been identified at time of analysis and the CVE is not listed in the CISA KEV catalog.
Use-after-free memory corruption in MongoDB Server's $graphLookup aggregation stage allows an authenticated high-privilege user to crash the server or potentially execute unintended code by combining aggregation and memory-management commands in a way that causes a stale internal reference to be dereferenced after the underlying memory is freed. Affected versions are MongoDB Server 8.3.0 through 8.3.7; a vendor-released patch is available in 8.3.8. No public exploit code or CISA KEV listing has been identified at time of analysis, making this a high-severity but access-gated vulnerability.
Resource exhaustion in iperf3 server mode allows unauthenticated remote attackers to trigger a Denial of Service by submitting crafted control-channel JSON with oversized numeric values for the `parallel` and `len` parameters. The server performs no bounds validation on these fields, causing it to spawn excessive threads or streams and allocate disproportionately large buffers until system resources are exhausted. No public exploit code has been identified at time of analysis, and this vulnerability is not currently listed in the CISA KEV catalog.
Unauthenticated account creation in Swing Music 3.0.0 exposes a critical access control gap: the POST /auth/profile/create endpoint is explicitly allowlisted from JWT verification, enabling any network-reachable attacker to register arbitrary user accounts with no credentials. Once registered, the attacker-controlled account can be used to authenticate and access server-protected functionality such as media libraries or administrative features. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog, though the low-complexity network vector makes opportunistic exploitation straightforward against exposed instances.
Server-side request forgery in Pinry through 2.1.13 enables unauthenticated remote attackers to coerce the application server into issuing arbitrary HTTP requests to internal or external hosts via the pin-from-URL feature, which passes attacker-supplied URLs directly to Python's requests.get() without host allowlisting or IP validation. Because ALLOW_NEW_REGISTRATIONS defaults to true, no account or authentication is required to trigger the vulnerable endpoint, making every default-configured internet-exposed Pinry instance exploitable without any attacker preconditions. Attackers can leverage this to reach cloud metadata endpoints such as AWS IMDSv1 at 169.254.169.254, harvest IAM credentials, or probe internal services unreachable from the public internet; no public exploit has been identified at time of analysis and no CISA KEV listing is present.
Denial of service in Red Hat EAP's Undertow HTTP/1.1 chunked-transfer decoder allows unauthenticated remote attackers to exhaust JVM heap memory by sending crafted requests with no chunk size or count limits enforced. The OutOfMemoryError triggered halts all deployments on the affected listener, not just the targeted application. CVSS metrics (AV:N/AC:L/PR:N/UI:N/A:H) confirm trivial exploitability with no authentication and no special conditions, making this a high-priority availability risk for any internet-facing EAP deployment. No public exploit or CISA KEV listing identified at time of analysis.
Missing authorization in calibre's Content Server allows readonly or anonymous users to persist unauthorized annotation changes to library books prior to version 9.12.0. The POST /book-update-annotations endpoint omits the needs_db_write=True decorator flag, causing the router to bypass ctx.check_for_write_access() and pass attacker-controlled JSON directly into the database via db.merge_annotations_for_book(). No public exploit code exists and the vulnerability is absent from CISA KEV, though the trivial one-line root cause lowers the barrier to exploitation on exposed instances.
OpenSign through version 2.37.0 exposes an unauthenticated remote integrity bypass in its document audit-trail mechanism, allowing any network-accessible attacker to fabricate arbitrary audit log entries by directly invoking the triggerevent Parse cloud function with caller-controlled viewer identity and IP address parameters. The vulnerability (CWE-345: Insufficient Verification of Data Authenticity) directly undermines non-repudiation in digitally signed documents, which is the legal and evidentiary foundation of electronic signature workflows. No public exploit has been identified at time of analysis, but the CVSS vector confirms the attack requires no authentication, no user interaction, and low complexity, making it trivially exploitable against any exposed OpenSign deployment.
Use-after-free in Google Chrome's Extensions subsystem prior to version 151.0.7922.137 enables an attacker to execute arbitrary code inside the Chrome sandbox by convincing a target to install a crafted malicious extension. The vulnerability class (CWE-416) indicates improper memory management in the extension handling code, where a freed memory reference is later dereferenced, corrupting heap state in a way an attacker can direct toward code execution. No public exploit or CISA KEV listing is identified at time of analysis; exploitation requires deliberate social engineering to achieve extension installation.
OS command injection in Google Turbinia's forensic worker fleet allows an attacker who can submit processing requests or control evidence path/name values to execute arbitrary commands on the worker nodes. The root cause, confirmed by PR #1631, is multiple workers (grep, photorec, strings) constructing shell command strings via Python format interpolation and invoking them with shell=True, allowing shell metacharacters in evidence paths to break out of the intended command. The fix, released 2026-07-10, replaces all affected workers with list-based subprocess invocation, eliminating shell interpretation.
Out-of-memory denial-of-service in ffuf prior to v2.2.0 allows a malicious HTTP server to crash the fuzzer by returning a decompression bomb - a tiny compressed payload that expands to gigabytes - because the response-size guard in pkg/runner/simple.go checked only the compressed Content-Length while io.ReadAll consumed the fully decompressed stream without any byte cap. Any ffuf user fuzzing a hostile endpoint is affected; no special configuration is required. The issue is fixed in v2.2.0 via io.LimitReader; no public exploit has been identified and it is not listed in CISA KEV.
IIOP NameService in Red Hat JBoss Enterprise Application Platform (EAP) accepts bind operations without authentication, allowing unauthenticated network attackers to register malicious CORBA object references under arbitrary JNDI names. When legitimate clients subsequently perform JNDI lookups, they resolve the attacker's malicious Object Request Broker (ORB), enabling man-in-the-middle interception of CORBA/RMI-IIOP invocations or denial-of-service on dependent application flows. EPSS data was not provided; no public exploit code has been identified at time of analysis and this CVE is not listed in CISA KEV.
Server-Side Request Forgery in Red Hat OpenShift Container Platform 4's Dev Console webhook helpers allows authenticated users to coerce the console pod into issuing arbitrary outbound HTTP requests on their behalf. Because the console pod operates from a privileged network position within the cluster, this enables lateral movement to internal services - including the Kubernetes API server, metadata endpoints, and internal microservices - that would otherwise be unreachable from outside the cluster. No public exploit or CISA KEV listing has been identified at time of analysis, but the Scope:Changed CVSS metric reflects the cross-boundary nature of the impact.
Undertow's AJP listener unconditionally trusts the ssl_cert and is_ssl AJP request attributes without requiring a shared-secret, allowing an unauthenticated remote attacker with direct TCP access to port 8009 to impersonate any X.509 client certificate identity and bypass CLIENT-CERT mutual TLS authentication entirely. Deployments where Undertow acts as a back-end behind a reverse proxy - with CLIENT-CERT authentication enforced at the proxy layer but the AJP port exposed on an internal network - are directly at risk of identity spoofing and authorization bypass. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog; however, the bypass primitive is architecturally simple for any attacker who has obtained internal network access to the AJP port.
Server-Side Request Forgery in the OpenShift Console Helm catalog proxy allows low-privileged namespace tenants to plant a malicious ProjectHelmChartRepository resource pointing to an attacker-controlled URL, causing the console pod to issue server-side fetches that bypass tenant egress restrictions. Combined with Helm catalog metadata poisoning and subsequent admin-mediated chart installation, this multi-stage attack chain enables privilege escalation within the cluster. No CISA KEV listing or public exploit code has been identified at time of analysis, though the CVSS Scope:Changed rating correctly reflects that the console pod's cross-boundary requests extend impact beyond the originating namespace.
Unauthenticated remote access to SAP Manufacturing Integration and Intelligence (MII) scheduling functions is possible due to a missing authorization check on scheduling-related API endpoints. Any network-reachable attacker without credentials can retrieve, create, modify, or delete scheduling data managed by the application, impacting confidentiality, integrity, and availability at a low severity level each. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the trivial exploitation conditions - no authentication, no user interaction, low complexity - lower the barrier to opportunistic abuse significantly.
Incorrect Authorization in Adobe ColdFusion 2023 and 2025 enables unauthenticated remote attackers to bypass security controls and gain limited unauthorized read and write access to protected resources, with a limited disruption to availability. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms the attack requires no authentication, no user interaction, and is reachable over the network under low complexity conditions. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Account takeover in Rapid7 Velociraptor is possible when the platform is configured to use an external OIDC Identity Provider for authentication. Velociraptor maps OIDC email claims directly to internal usernames without validating the IdP's email_verified flag, enabling an attacker with any account on the same IdP to change their registered email address to match a target user's and seamlessly inherit that user's Velociraptor session and privileges. Given Velociraptor's role as a DFIR and endpoint monitoring platform, successful exploitation could expose sensitive forensic data, endpoint telemetry, and incident response artifacts. No public exploit code has been identified at time of analysis.
Missing authorization on the Cost Servlet in SAP Manufacturing Integration and Intelligence (SAP MII) exposes backend operations to unauthenticated remote attackers via crafted HTTP requests with specific parameter values. Successful exploitation grants read, create, modify, and delete access to application-managed business data, producing a limited but tripartite impact across confidentiality, integrity, and availability. No public exploit code or CISA KEV listing has been identified at this time, though the zero-privilege network vector lowers the bar for opportunistic probing.
Broken referrer enforcement in TYPO3 CMS backend and Install Tool allows an attacker with JavaScript execution capability on any of the site's own domains to invoke privileged backend routes and Install Tool endpoints using an authenticated victim's session. The regression was introduced in TYPO3 13.0.0 when both the backend and Install Tool were moved to serve from the site root entry point rather than the dedicated `/typo3/` subdirectory, causing the `ReferrerEnforcer` to accept any same-origin Referer header as legitimate backend traffic. Affected versions are TYPO3 CMS 13.0.0-13.4.33 and 14.0.0-14.3.5; no public exploit code has been identified at time of analysis.
Privilege escalation in the Windows Ancillary Function Driver for WinSock (afd.sys) allows an authenticated local attacker with low privileges to elevate to SYSTEM-level access by exploiting a use-after-free memory corruption condition in the kernel-mode driver. The flaw spans a wide swath of Microsoft's supported and legacy Windows ecosystem, from Windows 10 1607 and Server 2012 through Windows 11 26H1 and Server 2025, making the patching surface unusually broad. No public exploit code or active exploitation has been confirmed at time of analysis; however, the combination of kernel-level impact, full C/I/A compromise upon success, and low privilege prerequisite makes this a meaningful post-compromise escalation risk.
Privilege escalation in Windows Desktop Window Manager (DWM) is possible via a use-after-free memory corruption flaw exploitable by a locally authenticated low-privileged attacker. Successful exploitation grants full control over confidentiality, integrity, and availability of the affected system, consistent with elevation to SYSTEM-level privileges. No public exploit code has been identified at time of analysis, and CISA KEV listing has not been confirmed.
Remote code execution via improper input validation in a VAPIX API parameter on Axis OS affects Axis network camera and edge device deployments. An attacker holding administrator-privileged service account credentials can send a crafted API parameter to trigger the flaw, execute arbitrary code on the device, and potentially escalate to higher privileges. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog; however, the full-impact CVSS score of 7.2 with network attack vector and high C/I/A ratings reflects the severity of a successful post-authentication compromise.
Privilege escalation via a double-free memory corruption flaw in the Windows Kerberos implementation affects Windows 11 (24H2, 25H2, 26H1) and Windows Server 2025. A low-privileged local attacker can exploit the CWE-415 double-free condition to achieve arbitrary code execution at an elevated privilege level, effectively gaining full control over confidentiality, integrity, and availability of the affected system. No public exploit code has been identified at time of analysis, and exploitation requires high attack complexity, limiting immediate widespread risk; a vendor-released patch is available via Microsoft's Security Response Center.
Authorization bypass in MongoDB Server allows an authenticated user holding only a limited database-scoped role to issue commands against protected system collections - such as system.users and system.roles - that their assigned privileges should explicitly prohibit. The flaw (CWE-863, Incorrect Authorization) means MongoDB's role-based access control enforcement is bypassed for certain actions on these collections, enabling the attacker to drop and recreate them without proper authorization. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, but the potential to destroy authentication and role-definition data makes this a high-severity integrity and availability risk for any MongoDB deployment with multiple users.
Out-of-bounds read and memory exhaustion flaws in Velociraptor's NTFS parsing library allow denial of service when processing maliciously crafted NTFS images. Specifically affects deployments using the dead disk forensics workflow where Velociraptor ingests untrusted NTFS image files rather than live filesystems. An attacker who can supply a corrupted NTFS volume to a Velociraptor analyst can crash the tool, disrupting forensic investigations. No public exploit identified at time of analysis; patch available in version 0.77.2 and later.
Memory corruption in MongoDB Server's timeseries collection handling allows an authenticated user with write privileges to corrupt internal bucket data structures through crafted document insertions, then trigger out-of-bounds memory access via a subsequent insert. The impact spans denial of service via server crash, limited exposure of in-process memory contents, and memory corruption - all achievable without complex prerequisites beyond low-privilege authentication. No public exploit is identified at time of analysis, but the CVSS 4.0 score of 7.2 reflects the high availability impact against a widely deployed database platform.
Credential exfiltration in n8n's workflow automation platform allows any user with Editor access to a shared workflow to bypass authorization checks and use or exfiltrate credentials they are not permitted to access. The flaw exists because n8n validates credential permissions only for a node's top-level credential references, not for credentials embedded inside an Execute Sub-workflow node's inline workflow JSON (Source = Parameter); the embedded reference passes both save-time and runtime validation and resolves using the parent workflow's project context. No public exploit code has been identified at time of analysis, but the CVSS 4.0 score of 7.2 reflects a credible, low-complexity path to high-confidentiality impact when workflow sharing is in use.
Queryable Encryption maintenance operations in MongoDB Server permit an authenticated low-privileged database user to cause unauthorized modification or destruction of data in collections beyond their authorization scope. The flaw stems from insufficient validation of internal metadata namespace references during operations such as compaction, allowing a user scoped to one encrypted collection to trigger damaging actions against a logically separate collection. No public exploit has been identified and this vulnerability is absent from the CISA KEV catalog, but the high integrity and availability impact warrants urgent prioritization for any deployment leveraging the Queryable Encryption feature.
Out-of-bounds read in Intel PROSet/Wireless WiFi Software at the Ring 2 device driver layer allows adjacent network attackers without authentication to escalate privileges on affected Windows systems. The flaw, tracked under CWE-125, can be triggered by a low-complexity attack from the same WiFi segment or Layer 2 broadcast domain, requiring no user interaction, and yields High availability impact alongside Low confidentiality and integrity exposure. No public exploit has been identified at time of analysis and the CVE is not listed in CISA KEV, but the unauthenticated adjacent attack surface is meaningful for enterprise mobile workforces on untrusted networks.
Improper access control within Ring 3 (user application space) of Intel processors permits privilege escalation from authenticated local user-level access to higher system privilege levels, with high confidentiality and integrity impact on the vulnerable system. Exploitation demands local access, low-privilege authentication, high attack complexity, and specialized internal knowledge of Intel processor microarchitecture internals - substantially narrowing the realistic attacker population. No public exploit code has been identified and no CISA KEV listing exists at time of analysis, consistent with a threat relevant primarily to sophisticated, targeted adversaries.
Typebot's webhook resume endpoint exposes an insecure direct object reference flaw that allows any authenticated user holding read access to at least one typebot to inject arbitrary JSON payloads into a suspended webhook session owned by a completely different typebot on the same instance. The handler validates authorization against the caller-supplied typebotId but then resolves the session result record solely by resultId without binding it to the authorized typebot, enabling an attacker to mix a legitimately authorized typebotId and blockId with a foreign live resultId to hijack cross-tenant execution flow and advance the victim's business logic. No public exploit has been identified at time of analysis; vendor-released patch version 3.17.0 is available and resolves the flaw.
Cross-tenant project takeover in Taubyte Tau v1.1.10 enables any authenticated GitHub user to read or permanently delete projects belonging to other tenants by supplying arbitrary project IDs to the GET and DELETE /projects/{id} HTTP endpoints. The GitHubTokenHTTPAuth middleware performs only token validity checks, exposing bare KV-store operations (projects.Fetch and project.Delete) to any caller holding a valid GitHub OAuth token without verifying project ownership. No public exploit exists and SSVC confirms no observed exploitation, but the low-privilege requirement (any GitHub account) combined with permanent data destruction capability makes this a critical multi-tenant isolation failure for any exposed Tau deployment.
Path traversal in n8n's Git node before versions 1.123.67, 2.31.5, and 2.32.1 allows authenticated low-privilege users to escape the repository sandbox during fetch, pull, and push-tags operations. By pointing an allowlisted remote configuration value at a local filesystem path outside the intended sandbox, an attacker with workflow create/execute rights can pull arbitrary local git repositories into the workspace and read their files and full commit history, including any secrets or credentials stored in git history. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the low complexity and low-privilege attack path make it a realistic insider or compromised-account threat in multi-user n8n deployments.
Cross-workspace session hijacking in Typebot 3.16.1 allows an authenticated low-privileged user to inject arbitrary webhook payloads into another workspace's active WhatsApp preview session by supplying a valid typebotId they control alongside a victim's preview phone number. The WhatsApp test-webhook handler authorizes the caller against their own typebot but then resolves the target session exclusively by the phone-keyed session ID (`wa-preview-{phone}`), making no ownership binding between the resolved session and the requesting typebotId. As a result, an attacker can advance or corrupt another workspace's unpublished chatbot flow without any authorization on that typebot. No public exploit has been identified; patch is confirmed available in version 3.17.0.
Relay port pool exhaustion in Coturn prior to 4.17.0 permits authenticated TURN clients to permanently consume relay ports by issuing EVEN-PORT Allocate requests with the R (reservation) bit cleared to zero. The `turnports_allocate_even()` function in `src/apps/relay/turn_ports.c` unconditionally marked the odd sibling port as TPS_TAKEN_ODD regardless of R bit value; with R=0 no RTCP socket is ever bound to that port, so no release code path is ever triggered - each such allocation permanently removes one port from the relay pool until the pool is drained and subsequent allocations fail with STUN error 508. No active exploitation has been confirmed; a vendor-released patch is available in version 4.17.0.
Path traversal in Velociraptor's NewNotebook API allows authenticated users holding NOTEBOOK_EDIT permission to write files outside the organization's designated data store directory. While the written file is constrained to the '.json.db' extension, this is sufficient to overwrite critical internal metadata files - including ACL records and hunt configurations - causing data corruption that can undermine the integrity of active forensic investigations. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation requires a valid authenticated session with a specific permission grant.