Administrator authentication bypass in Yuxi (xerrors/Yuxi), a large-model-based knowledge base and knowledge-graph agent platform, affects all versions prior to 0.6.2. Because the backend only checks that a JWT is validly signed - without binding it to the specific deployment instance - an admin token minted in any other Yuxi instance, a local test environment, or one forged with the hardcoded default secret 'yuxi_know_secure_key' is accepted as a valid administrator, yielding full backend takeover. There is no public exploit identified at time of analysis, but the fix commit and the hardcoded default key are publicly visible on GitHub, making token forgery trivial wherever the secret was never changed.
Stored cross-site scripting in the self-hosted Cal.com (Cal.diy) scheduling platform, versions 2.1.1 through 6.2.0, lets an authenticated event owner break out of an inline analytics script string literal in the BookingPageTagManager component by supplying an unsanitized tracking ID, causing attacker-controlled JavaScript to run for every visitor of the public booking page. The flaw enables session-cookie theft, forging of authenticated actions, and self-propagating (wormable) spread by chaining to CSRF-able endpoints. No public exploit identified at time of analysis, though a third-party technical write-up exists.
Privilege escalation to remote code execution in Plesk (18.0.52 through 18.0.79.6, and the 18.0.80.0 branch before 18.0.80.2) lets a low-privileged panel user - a customer or reseller - abuse a flawed database cloning routine to run arbitrary code with the privileges of the database server administrator. Because Plesk multiplexes many tenants onto shared database infrastructure, this breaks tenant isolation and effectively hands a paying customer control of the shared DB admin context. No public exploit or CISA KEV listing has been identified; the vendor CVSS 4.0 score is 9.3 (Critical), though the vector's PR:N conflicts with the description's stated need for a low-privileged account.
Remote unauthenticated authentication bypass in WolfStack before 25.9.2 lets attackers fully compromise container hosts by supplying a hard-coded cluster secret in the X-WolfStack-Secret header. Because the secret is a compile-time constant published in src/auth/mod.rs, anyone who can reach a node's management port passes the require_auth() gate with no session, API key, or account, and can then enumerate every Docker/LXC container and run arbitrary commands as root inside any of them. No public exploit is identified at time of analysis, but the flaw is trivially reproducible from source and was reported by VulnCheck.
Command injection in Shescape (npm shell-escaping library) versions below 2.1.14 and the 3.0.x line below 3.0.1 allows an attacker-controlled argument to break out of a parenthesized cmd.exe construct and inject arbitrary shell syntax on Windows. The flaw affects applications that call the escape or escapeAll APIs with shell set to cmd.exe (or shell:true when CMD is the default), because getEscapeFunction in src/internal/win/cmd.js failed to escape the ( and ) characters. A working proof-of-concept payload is published in the vendor advisory; there is no CISA KEV listing and no evidence of active exploitation at time of analysis.
Cross-cluster remote code execution in Red Hat Advanced Cluster Management for Kubernetes 2 (acm-search-v2-rhel9 search collector) allows a hub-cluster administrator holding patch access to the Search Custom Resource to abuse the unvalidated Collector.ImageOverride field to push an attacker-chosen container image to every managed cluster in the fleet. Because the override is trusted and propagated hub-to-spoke, a single malicious CR edit yields command execution across all connected clusters, with the CVSS scope-change flag reflecting the jump from the hub trust boundary into separate managed-cluster security authorities. No public exploit identified at time of analysis, and this CVE is not listed in CISA KEV.
Unauthenticated local PHP file inclusion in the SP Page Builder extension for Joomla (versions before 6.8.0) lets remote attackers force the application to include and execute arbitrary PHP files already present on the server. Because included PHP is executed in the application context, this path-traversal flaw can escalate to remote code execution, and the CVSS 4.0 score of 9.2 reflects full compromise of confidentiality, integrity, and availability. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Anonymous information disclosure in SiYuan before v3.7.4 lets unauthenticated remote readers retrieve fully decrypted content from encrypted notebooks. Because the publish API treats encrypted notebooks as publicly accessible by default, any anonymous visitor can enumerate and read documents from an unlocked encrypted notebook without authentication or knowledge of the encryption key. Reported by VulnCheck and rated CVSS 4.0 9.2; no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Sensitive data disclosure in SiYuan note-taking application before v3.7.4 lets anonymous readers of a published workspace pull Relation and Rollup cell contents out of hidden or password-protected databases. Because renderAttributeView does not re-check authorization on the related database, an unauthenticated visitor can request a published attribute view that references a restricted database and read its protected values, and can bypass row-level filtering entirely when the first column is a non-block type. Reported by VulnCheck with a CVSS 4.0 base score of 9.2; no public exploit identified at time of analysis.
Information disclosure in SiYuan, a self-hosted block-based personal knowledge management app, lets anonymous, unauthenticated network callers read the contents of password-protected documents. Versions before v3.7.4 skip the publish-password tier check in the getGraph and getLocalGraph endpoints, so an attacker who reaches the instance can retrieve block-level text and the full reference/link topology of protected notes without ever supplying the publish password. Reported by VulnCheck and fixed in v3.7.4; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Credential disclosure in SiYuan note-taking software before v3.7.4 lets unauthenticated remote attackers read the session cookie signing key (CookieKey) from the /api/system/getConf endpoint when an instance runs in publish mode. With that key an attacker can mint valid signed session cookies, impersonate any user, and escalate to administrative control of the workspace. Reported by VulnCheck with a vendor security advisory (GHSA-34fj-mwm6-fjfg); no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Unauthorized cross-document content disclosure in SiYuan note-taking software before v3.7.4 allows remote attackers to read protected notes without credentials. The getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints resolve embed queries inside published blocks without re-checking publish-access controls, so an attacker who reaches a published SiYuan workspace can pull back content from password-protected, hidden, or forbidden documents. No public exploit identified at time of analysis, but VulnCheck rates it CVSS 9.2 (CVSS 4.0) and it constitutes an authentication/authorization bypass.
Sensitive credential exposure in SiYuan (self-hosted note-taking app) before v3.7.4 allows anonymous or publish-reader users to query the /api/system/getConf endpoint and retrieve unmasked secrets, including the session-cookie signing key, the OS username (leaked via the pandoc path), and encrypted-notebook key material. With the signing key, attackers forge and tamper with session cookies to impersonate any user, and on instances that have not configured an access-auth code they can escalate to full administrator privileges. No public exploit identified at time of analysis, but the flaw is remotely reachable without authentication against default configurations.
Stored cross-site scripting in CamaleonCMS's cama_contact_form plugin lets a low-privileged authenticated user persist arbitrary HTML/JavaScript via the unsanitized before_html field on the contact-form edit endpoint, which lacks proper authorization checks. The payload executes in the browser of anyone who loads the contact form - including administrators - enabling cookie theft, forged authenticated requests, and session takeover. Reported by VulnCheck with a public technical writeup; no public working exploit code and no active exploitation are confirmed at time of analysis.
Stored cross-site scripting in CamaleonCMS (owen2345/camaleon-cms) lets an authenticated low-privileged user persist a malicious HTML/JavaScript payload as a draft post title, which executes in an administrator's browser when the admin views the drafts listing. Because the payload runs in the admin's authenticated session, it enables session/cookie theft and forged administrative requests, effectively escalating a low-privileged account to admin-level control. Reported by VulnCheck with a public technical write-up; no public exploit identified at time of analysis and not listed in CISA KEV.
Integrity-check bypass in CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 lets an attacker defeat the product's file-integrity verification: when a LUKS-encrypted volume is present, the software fails to validate that encryption correctly and then silently skips ALL CryptoPro integrity checks, so tampered files pass as trusted. This undermines the pre-boot/endpoint trust guarantees the product exists to provide, enabling evil-maid-style tampering. There is no public exploit identified at time of analysis, though the flaw is the subject of a Black Hat USA 2026 disclosure ('The Cost of Obscurity'); EPSS is very low (0.11%, 1st percentile) and it is not on CISA KEV.
Authentication bypass in the kin-openapi Go library (getkin/kin-openapi) before 0.144.0 lets unauthenticated remote attackers reach protected routes when an application uses openapi3filter.ValidationHandler as its enforcement middleware without explicitly setting an AuthenticationFunc. Because Load() silently substitutes a no-op callback for a nil AuthenticationFunc, every OpenAPI security requirement is treated as satisfied and the fail-closed guard is never reached. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the flaw is fail-open by default, disclosed with source-level detail in GHSA-r277-6w6q-xmqw, and carries a vendor CVSS of 9.1.
Credential disclosure in the Budibase low-code platform (versions prior to 3.40.1) lets an unauthenticated attacker steal a REST datasource's stored Bearer, Basic, or static-header secrets. Because RestIntegration._req in packages/server/src/integrations/rest.ts attaches getAuthHeaders and defaultHeaders before resolving the request host, a PUBLIC-role query invoked via POST /api/v2/queries/:queryId can be pointed at an attacker-controlled host - using an absolute URL or a {{ parameter }} in the path - and the API-masked (--secret-value--) credentials are delivered in cleartext. Publicly available exploit code exists (full PoC in the GHSA advisory); no public evidence of active exploitation. This is a bypass of the earlier GHSA-3gp5 fix, which closed the base-URL rewrite vector but added no same-origin check.
Cryptographic validation weakness in the IBM Security Verify Access / Verify Identity Access Reverse Proxy (WebSEAL) allows remote attackers to bypass expected integrity checks on user-supplied data in certain configurations, affecting Security Verify Access 10.0 through 10.0.9.2 and Verify Identity Access (and its Container edition) 11.0 through 11.0.3. NVD rates this CVSS 9.8, but the vague 'certain configurations' wording and a low EPSS of 0.24% (15th percentile) with SSVC exploitation status 'none' point to a config-dependent issue rather than mass exploitation. There is no public exploit identified at time of analysis and it is not on CISA KEV.