Stored XSS in tablib's HTML export path before version 3.10.0 allows an authenticated attacker to inject arbitrary JavaScript via maliciously named worksheet titles sourced from imported XLSX, ODS, XLS, or YAML files. The export_book method in _html.py previously interpolated dataset titles directly into HTML h3 tags using an f-string, bypassing all escaping; script payloads assigned to the Dataset title attribute execute in a victim's browser when the exported HTML is rendered. No active exploitation confirmed in CISA KEV; vendor-released patch is available as v3.10.0.
Security restriction bypass in IBM i 7.3 through 7.6 enables remote authenticated attackers to elevate privileges via unsafe Java reflection (CWE-915), allowing dynamic modification of object attributes in ways the platform's access control layer does not anticipate. The CVSS 8.3 score reflects network reachability, low attack complexity, and high confidentiality and integrity impact - meaning any valid low-privilege account can exploit this without user interaction. No public exploit code or CISA KEV listing has been identified at the time of analysis, but the low barrier to exploitation (PR:L, AC:L) makes this a credible lateral-movement or privilege-escalation path in IBM i shops.
IBM i versions 7.3 through 7.6 expose arbitrary Control Language (CL) command execution to remote authenticated attackers through insufficient input validation in a network-accessible interface. Any low-privileged IBM i user account is sufficient to exploit this flaw, enabling high-impact compromise of confidentiality and integrity on the affected system. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity and broad version range across currently supported IBM i releases make this a meaningful patching priority for affected enterprises.
IP-based access restriction bypass in GitLab Enterprise Edition exposes private project merge request metadata to authenticated users who would otherwise be blocked by network-level controls. Affecting all EE versions from 12.0 up to 19.0.6, 19.1.4, and 19.2.2, the flaw stems from a missing authorization check in a merge requests API endpoint that fails to enforce configured IP allowlists. A publicly available exploit exists via HackerOne, and while the confidentiality impact is scoped to limited merge request information, the bypass of a deliberate security boundary elevates practical risk for organizations relying on IP restrictions as a compensating control.
Missing RBAC middleware on Budibase's GET /api/global/groups API endpoint allows any authenticated BASIC-role user to enumerate all tenant groups, role-to-application mappings, member user lists, builder permission flags, and default-group designations that should be restricted to builders and administrators. All Budibase versions prior to 3.39.25 are affected across both self-hosted and cloud deployments. No active exploitation is confirmed in CISA KEV, but a complete proof-of-concept with Docker-based reproduction steps is publicly disclosed in GitHub Security Advisory GHSA-4qcj-m5wp-jmf4, reducing exploitation effort to near zero for any tenant user with a valid session.
Unauthorized disclosure of external status check configuration in GitLab Enterprise Edition allows any authenticated user holding a developer-role to read merge request API data that should be restricted to higher-privileged roles (maintainer or owner), due to a missing authorization check on the affected endpoint. Versions spanning 16.0 through 19.2.x are affected across a wide installation base. A publicly available proof-of-concept was disclosed via HackerOne (report #3622861), and GitLab has confirmed and remediated the issue; no confirmed active exploitation (CISA KEV) has been reported at time of analysis.
Incorrect authorization in GitLab Enterprise Edition's GraphQL layer allows authenticated users to read policy configurations belonging to namespaces they have no authorized access to. Affected versions span GitLab EE 19.1 before 19.1.4 and 19.2 before 19.2.2. A publicly available proof-of-concept exploit exists (HackerOne report #3776182), though no active exploitation has been confirmed by CISA KEV, making this a medium-severity information disclosure risk for organizations running GitLab EE at affected patch levels.
Package registry metadata modification in GitLab CE/EE exposes an improper authorization flaw (CWE-863) that permits authenticated developer-role users to alter package registry metadata normally restricted to maintainers, across all instances running versions 17.6 through 19.2.1. A publicly available exploit has been disclosed via HackerOne (report 3598070), making this immediately actionable for insider or contractor threat scenarios. No active exploitation has been confirmed by CISA KEV, but the combination of wide version range, broad GitLab deployment footprint, and public exploit code elevates practical risk beyond the moderate CVSS 4.3 score alone.
Out-of-bounds write in Zephyr RTOS's llext subsystem allows a local attacker with low privileges to corrupt supervisor-context memory by loading a crafted relocatable ELF extension on Xtensa targets. The vulnerability in llext_link_plt() (subsys/llext/llext_link.c) occurs before any extension code executes - at link time - meaning sandbox protections are bypassed entirely. Exploitation complexity is high (CVSS AC:H) due to constraints on the write value, no public exploit code or CISA KEV listing exists at time of analysis, and impact is confined to deployments using llext on Xtensa architecture.
Remote unauthenticated denial of service and sensitive information disclosure in IBM i 7.3 through 7.6 stems from an integer underflow (CWE-125 out-of-bounds read) reachable over the network without authentication. An attacker sending a crafted request can crash an affected service and read portions of process memory, yielding both high availability impact and limited confidentiality exposure. No public exploit code has been identified at time of analysis and this CVE is not listed in the CISA KEV catalog, though the low-complexity, unauthenticated attack vector makes it a meaningful risk for internet-exposed IBM i systems.
Full account takeover is possible in Budibase's account portal via an Insecure Direct Object Reference (IDOR) in the email-change API endpoint, affecting all versions prior to 3.40.0. POST /api/v2/email on account.budibase.app accepts a client-supplied accountId without binding it to the authenticated session - an authenticated attacker who obtains a victim's accountId UUID can redirect the email-change verification code to an attacker-controlled address, then complete a password reset to seize the victim's account entirely without any victim interaction required. No public exploit code has been identified at time of analysis; the vulnerability is fixed in Budibase 3.40.0.
Authentication bypass in Fortinet FortiManager and FortiManager Cloud allows unauthenticated remote attackers to circumvent access controls via an alternate path or channel, potentially gaining full administrative control over managed security infrastructure. Affected version ranges span FortiManager 7.2.5 through 7.6.1 and FortiManager Cloud 7.2.5 through 7.6.1, covering multiple active release branches of this centralized network security management platform. No CISA KEV listing or confirmed public exploit has been identified at time of analysis, but the unauthenticated network vector combined with full C/I/A impact and the high-value nature of the target - a platform governing firewall policy across entire enterprise estates - elevates real-world priority significantly beyond the AC:H qualifier alone.
Remote code execution in Fortinet FortiClientWindows affects versions 7.2.0-7.2.11 and 7.4.0-7.4.3, exploitable by any attacker capable of intercepting or forging DNS responses destined for the target host. Maliciously crafted DNS response packets trigger a classic buffer overflow (CWE-120) in the client's DNS parsing logic, allowing arbitrary code execution without requiring any credentials or user interaction. No public exploit or CISA KEV listing has been identified at time of analysis, and the high attack complexity requirement (DNS MITM/poisoning position) meaningfully limits opportunistic exploitation.
Remote authenticated command execution in IBM i 7.3 through 7.6 stems from improper privilege management during monitor owner reassignment, a specific system management function. An attacker holding low-privileged credentials can exploit this flaw over the network without user interaction to execute arbitrary commands, achieving both high confidentiality and high integrity impact on the affected system. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the low attack complexity and authentication barrier make this a credible threat in any environment with broad user access to IBM i.
Stack-based buffer overflow in Fortinet FortiOS, FortiProxy, and FortiPAM allows unauthenticated remote attackers to execute arbitrary code or commands within the WAD (Web Application Daemon) process via crafted sockets - but only on devices where the explicit proxy is simultaneously configured with Kerberos authentication and SOCKS enabled. Exploitation further requires defeating stack canary protection and ASLR, elevating real-world attack complexity well above the raw CVSS base score implies. No public exploit or active exploitation has been confirmed; Fortinet PSIRT published advisory FG-IR-26-161 disclosing the issue.
Authentication bypass in IBM Security Verify Access and IBM Verify Identity Access exposes protected resources to unauthenticated remote attackers via inconsistent HTTP request parsing at the reverse proxy layer. Affected deployments span IBM Security Verify Access 10.0-10.0.9.2 and IBM Verify Identity Access 11.0-11.0.3 (software and container variants). No public exploit or CISA KEV listing has been identified at time of analysis, but the identity gateway role of this product means a successful bypass could silently undermine authentication enforcement across all downstream resources it protects.
Permanent deletion of protected internal metadata across repositories in JFrog Artifactory is possible by any low-privilege authenticated user under specific, undisclosed conditions. The flaw stems from CWE-862 (Missing Authorization), where the platform fails to enforce access controls on a metadata-deletion pathway that should be restricted to privileged roles. With a CVSS score of 8.1 (High), this represents a significant integrity and availability risk - an attacker with only a standard user account can irreversibly destroy protected repository metadata, with no confidentiality exposure. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Privilege escalation in IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 allows an authenticated low-privileged user to gain unauthorized access to protected data and functionality when the Liberty collectives feature is in use. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms network-exploitable, low-complexity exploitation requiring only low-level authentication with no user interaction - resulting in high confidentiality and integrity impact. No public exploit or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available.
Privilege escalation in IBM Security Verify Access and IBM Verify Identity Access allows an authenticated low-privilege user to assume the identity and privileges of another user by submitting a specially crafted network request. The vulnerability spans both on-premises and container deployments across multiple product generations (10.x and 11.x lines), broadening the exposed surface considerably. No public exploit code or CISA KEV listing has been identified at time of analysis, but the CVSS score of 8.1 and low attack complexity make this a high-priority patching target for organizations running IBM identity infrastructure.
Incorrect authorization in RustFS prior to 1.0.0-beta.12 permits authenticated callers to inject attacker-controlled HTTP request headers into the IAM policy condition value map, overriding server-derived identity keys including userid, username, principaltype, groups, versionid, signatureversion, and jwt:/ldap:-prefixed condition keys. The get_condition_values function folded client-supplied HeaderMap entries without filtering reserved key names, enabling a low-privilege API user to fabricate identity context and satisfy policy conditions granted to other users or groups. No public exploit has been identified at time of analysis, and a vendor-released patch is available as version 1.0.0-beta.12.
Policy engine logic in RustFS incorrectly swaps ForAllValues: and ForAnyValue: set-qualifier semantics when paired with negated condition operators (StringNotEquals, StringNotLike, ArnNotEquals, ArnNotLike, StringNotEqualsIgnoreCase), allowing authenticated low-privilege users to bypass IAM-style access controls in versions prior to 1.0.0-beta.12. The root cause is that negation is applied to the aggregate quantifier result rather than to each individual request-value predicate before quantification, meaning partially overlapping policy and request value sets can cause an explicit Deny guardrail to evaluate as Allow - including policies controlling access via jwt:groups and jwt:roles claims. No public exploit has been identified at time of analysis, but the flaw directly undermines the authorization boundary for any deployment relying on negated set-qualifier conditions.
Stored cross-site scripting in Winter CMS's backend editor settings allows an authenticated backend user holding the `backend.manage_editor` permission to inject arbitrary JavaScript that executes in the browsers of all other backend users who load any backend page. The attack exploits LESS CSS's escape syntax (`~"..."`) to break out of the CSS context and embed script tags in compiled output served by `renderCss()`, which was previously returned unsanitized. No public exploit code has been identified at time of analysis, and this is not listed in CISA KEV; however, the class of vulnerability is well understood and the specific payload pattern is documented in the patch's test suite.
Stored XSS in Winter CMS backend allows a high-privileged user with the `backend.manage_branding` permission to inject malicious HTML/JavaScript via the LESS CSS compiler's output in Settings → Customize Backend → Styles, which is rendered unsanitized on every backend page. The same rendering flaw is present in the Editor Settings → Markup Styles panel (`backend.manage_editor` permission), addressed in the same patch. An attacker exploiting this could steal session tokens or perform actions as any other authenticated backend user who visits a backend page. No public exploit or KEV listing exists, but the issue is confirmed by the vendor and an identical CVE (CVE-2025-61676) affects the sister project October CMS.
XML injection in IBM i versions 7.3 through 7.6 enables a remote low-privileged authenticated attacker to exfiltrate sensitive information and compromise system integrity without disrupting availability. The CVSS 8.1 High score reflects a network-accessible, low-complexity attack path requiring only a standard user account. No public exploit has been identified at time of analysis; a vendor-released patch is available via IBM's support portal.
Cache poisoning in JFrog Artifactory 7.161.0-7.161.15 allows unauthenticated remote attackers to inject untrusted package content into the artifact cache under specific triggering conditions, compromising artifact integrity (I:H) and availability (A:H) with no confidentiality exposure. The vulnerability is rooted in CWE-345 (Insufficient Verification of Data Authenticity), meaning Artifactory fails to validate the authenticity of content before caching it from upstream remote repositories. No public exploit has been identified at time of analysis, and the CVSS UI:R component indicates some victim interaction is required, moderating but not eliminating risk given Artifactory's central role in software supply chains.
Kernel information disclosure and local denial of service affect Zephyr RTOS on Intel ALH-equipped hardware through an unvalidated stream_id parameter in the Intel ALH digital-audio-interface driver. A local user-mode thread holding explicit ALH device-object access can invoke the dai_get_properties_copy() syscall with an arbitrary stream_id, triggering an out-of-bounds read from the fixed 64-entry alh_handshake_map[] array and leaking one byte of kernel memory per call, along with a computed FIFO register address that can expose kernel address-space layout. No public exploit has been identified at time of analysis; exploitation is constrained to systems built with CONFIG_USERSPACE and where device-object access has been deliberately granted to untrusted threads.
Persistent cross-site scripting in Progress Software's WhatsUp Gold network monitoring platform (all versions before 2026.0.2) allows an authenticated attacker on an adjacent network to bypass frontend input sanitization controls and inject stored malicious script content into the application. When a victim user - likely an administrator - views the poisoned page, the injected script executes in their browser context, enabling session hijacking, credential theft, or unauthorized actions with the victim's privilege level. No public exploit identified at time of analysis, and the adjacent-network attack vector limits internet-scale exposure, but the high C/I/A impact scores reflect the sensitivity of network monitoring credentials.
SQL injection in IBM i 7.3 through 7.6 enables a local authenticated attacker to cause a denial of service - and potentially achieve broader data confidentiality and integrity impact - by submitting SQL commands containing improperly neutralized special elements. The flaw (CWE-89) is exploitable without user interaction once local access is obtained. No public exploit code has been identified and CISA has not listed this in KEV; a vendor patch is available.
OS command injection in IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 enables a local attacker to execute arbitrary code on the underlying operating system. Exploitation requires user interaction (UI:R) but no prior privileges (PR:N), suggesting the attack vector involves a maliciously crafted file or input that a victim opens or processes with the client application. IBM has released a patch via advisory node/7282954, and no public exploit or CISA KEV listing has been identified at time of analysis.
Arbitrary code execution is achievable on Windows endpoints running IBM i Access Client Solutions (ACS) 1.1.2.0 through 1.1.9.13 when the software is installed in all-users mode, because the installer leaves one or more configuration files world-writable. Any local user with standard (non-administrator) privileges can modify these files to inject code that executes under the security context of other users who subsequently launch the application. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the CVSS 7.8 High rating reflects the full confidentiality, integrity, and availability impact achievable once a local foothold exists.
Authentication bypass via spoofing in Dell Display and Peripheral Manager (DDPM) for Windows, versions prior to 2.3.0.17, enables local low-privileged attackers to escalate their privileges and execute arbitrary code on affected systems. The flaw (CWE-290) allows an attacker already present on the system to spoof an authenticated identity, circumventing DDPM's internal access controls. Dell has released a patched version (2.3.0.17) via advisory DSA-2026-320; no public exploit or CISA KEV listing has been identified at time of analysis.
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows, all versions prior to 2.3.0.17, is achievable by a low-privileged local attacker exploiting an authentication bypass by spoofing flaw. The CWE-284 root cause - improper access control - allows the attacker to circumvent DDPM's privilege verification, resulting in full confidentiality, integrity, and availability compromise on the affected host. No active exploitation has been confirmed by CISA KEV and no public exploit code has been identified at time of analysis; Dell has released the corrective patch in version 2.3.0.17 via advisory DSA-2026-320.
Elevation of privilege and arbitrary code execution in Dell Display and Peripheral Manager (DDPM) for Windows allows a low-privileged local attacker on affected systems to bypass access controls and run code at a higher privilege level. All DDPM versions prior to 2.3.0.17 are affected, as confirmed by Dell advisory DSA-2026-320. No public exploit code or CISA KEV listing has been identified at time of analysis, though tags indicate RCE and authentication bypass primitives are involved, consistent with the CWE-284 root cause.
Local privilege escalation in Dell Display and Peripheral Manager (DDPM) for Windows enables a low-privileged local attacker to bypass access controls and execute arbitrary code at elevated privileges, affecting all versions prior to 2.3.0.17. The root cause is an improper access control flaw classified as CWE-290 (Authentication Bypass by Capture-replay), through which a standard user account can subvert DDPM's privileged service process and achieve system-level code execution. Dell has released version 2.3.0.17 via advisory DSA-2026-320, and no public exploit or active exploitation has been identified at time of analysis.
Local privilege escalation in Autodesk's ODIS (Online Deployment & Installation Service) installer allows a low-privileged local attacker to inject unauthenticated IPC messages into named pipes by executing a specially crafted binary on the target machine. The root cause is incorrect permission assignment (CWE-732) on named pipe resources, permitting unauthorized low-privileged processes to connect, write, or manipulate pipe ownership in ways that fully compromise confidentiality, integrity, and availability. No public exploit has been identified at time of analysis; the vendor has confirmed the issue and released a patched installer via advisory ADSK-SA-2026-0013.
Local privilege escalation in IBM Informix Dynamic Server 14.10 and 15.0 allows any low-privileged local OS user to gain root access by exploiting improper access controls in the setuid-root `oninit` utility. The CVSS vector (AV:L/AC:L/PR:L/UI:N) confirms a low-complexity local attack requiring no user interaction, resulting in full system compromise. No public exploit has been identified at time of analysis, and this vulnerability is not currently listed in the CISA KEV catalog.
Remote code execution in Nagios Core (before 4.5.14) and Nagios XI (before 2026R1.7) allows authenticated UI users to run arbitrary OS commands as the nagios system user by injecting shell metacharacters through the com_data parameter when notification commands reference $NOTIFICATIONCOMMENT$ or $NOTIFICATIONAUTHOR$ macros in shell-executed positions. The vulnerability is classified as CWE-78 (OS Command Injection) and reported by VulnCheck; vendor-released patches are now available for both product lines. No public exploit identified at time of analysis, and exploitation is bounded by a non-default notification command configuration requirement reflected in the CVSS 4.0 AT:P metric.
Authenticated remote code execution in Nagios Core (before 4.5.13) and Nagios XI (before 2026R1.5) is achievable via OS command injection through custom-variable macros processed by the Nagios Remote Data Processor (NRDP). An attacker with valid NRDP access can embed shell metacharacters in a custom variable value that is later expanded inside a shell-executed command definition, causing arbitrary OS commands to run with the privileges of the Nagios process. No public exploit code or CISA KEV listing exists at time of analysis, but impact is rated high across confidentiality, integrity, and availability given full command execution on the monitoring server.
Out-of-bounds read in IBM i 7.3 through 7.6 enables remote authenticated attackers with low-privilege credentials to obtain sensitive information across a security scope boundary, yielding a high confidentiality impact. The CVSS vector (S:C/C:H) indicates the leaked data can originate from components outside the attacker's immediate security context - a notable escalation beyond typical information disclosure. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory 7283280.
Regex metacharacter injection in @astrojs/netlify prior to 8.1.2 causes the Netlify Image CDN allowlist to be broader than the developer intended, allowing optimization of images from unintended URL paths on already-allowed hostnames. The root cause is that remotePatternToRegex() escapes dots in hostnames but passes literal pathname values into the generated regex unescaped, so a pathname like /img/v1.0/file silently becomes a wildcard that matches /img/v1X0/file or /img/v1/0/file. No active exploitation has been confirmed (not in CISA KEV), though a working proof-of-concept is included in the GHSA advisory; CVSS 3.7 with AC:H reflects the constrained but network-accessible impact.
Email injection in the Estatik Real Estate Plugin for WordPress (versions before 4.3.4) allows unauthenticated remote users to send emails to arbitrary recipients with fully attacker-controlled subject, body, and Reply-To headers by abusing the plugin's unvalidated property request form recipient list. The site's own mail infrastructure is effectively weaponized as an open relay, enabling phishing and spam distribution from a trusted sending domain. A publicly available proof-of-concept is referenced in the WPScan advisory; active exploitation has not been confirmed by CISA KEV, though the low skill barrier introduced by the PoC elevates practical risk above what the CVSS 3.7 base score alone suggests.
Remote code execution in IBM i 7.3 through 7.6 is exploitable by a remote authenticated attacker via improper bounds checking (CWE-787: Out-of-bounds Write). The high integrity impact (I:H) in the CVSS vector confirms that successful exploitation allows an attacker to overwrite memory and achieve arbitrary code execution on the affected IBM Power Systems platform. No public exploit identified at time of analysis, and IBM has released a vendor patch; however, the low-privilege authentication requirement (PR:L) broadens the attacker pool to any valid system user.
Server-side request forgery in Prowler's Lighthouse AI provider configuration allows an authenticated high-privilege user to redirect outbound HTTP requests - including the configured API key in the Authorization header - to attacker-controlled or internal network endpoints. Affected are all Prowler deployments prior to version 5.33.1 where the Lighthouse feature and an openai_compatible provider type are in use. No public exploit has been identified at time of analysis, but the attack path is straightforward for any user holding Lighthouse configuration permissions, making API key theft and internal network probing realistic objectives.
Server-side template injection in CamaleonCMS 2.9.1 enables authenticated administrators to achieve arbitrary remote code execution by embedding ERB expressions in the email parameter of the admin test_email endpoint. When SMTP rejects the crafted recipient address, Rails renders the rejection exception message as an inline ERB template, evaluating attacker-controlled Ruby code as the Rails process user. A patch is available from the vendor; no CISA KEV listing exists at time of analysis, but the CVSS 4.0 score of 7.5 reflects high confidentiality, integrity, and availability impact constrained by the admin-only prerequisite and the SMTP-rejection triggering condition.
JupyterLab's ImageViewer component escalates a blob URL lifecycle bug into server-side remote code execution - a specially crafted SVG opened in the ImageViewer retains an executable same-origin context after its blob URL is prematurely revoked, and when the victim opens that image in a new browser tab, embedded JavaScript executes within the JupyterLab server's origin. That same-origin privilege grants direct access to JupyterLab's kernel execution API, turning a browser-side XSS into full RCE on the JupyterLab server. All versions prior to 4.5.10 and 4.6.2 are affected; no public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the two-step user interaction required is realistic in data-science workflows where images are routinely inspected.
Denial of service in NextAuth.js's getToken() helper allows unauthenticated remote attackers to crash any API route, middleware, or server-side handler that calls getToken() directly by sending a single HTTP request with a malformed Authorization: Bearer header containing invalid percent-encoding. The vulnerability affects next-auth 4.0.6-4.24.14, next-auth 5.0.0-beta.0-5.0.0-beta.31, and @auth/core 0.1.0-0.41.2, and is fixed in next-auth 4.24.15, next-auth 5.0.0-beta.32, and @auth/core 0.41.3. No public exploit code has been identified at time of analysis, but the trigger condition is trivially constructible from the public advisory description alone.
Unauthenticated remote crash of rsyslogd is possible through a flaw in the optional imptcp input module, where a crafted input sequence during oversize-frame recovery produces an invalid internal message length and terminates the logging daemon. Systems running Red Hat Enterprise Linux 6 through 10 are affected only when imptcp is explicitly loaded with a non-default frame delimiting mode; the default imptcp framing and the separate imtcp module are explicitly confirmed unaffected. No public exploit code and no CISA KEV listing have been identified at time of analysis; CVSS scores this at 7.5 High solely on the basis of network-accessible, unauthenticated availability impact.
Off-by-one error in Nimiq Albatross' validity store enables transaction replay attacks, causing double execution of any crafted transaction on MainNet. Versions of nimiq-blockchain up to and including 1.5.0 contain a strict-inequality comparison that prematurely expires replay protection by up to 59 blocks (~10 minutes), while the protocol continues to accept the transaction as valid. Any network participant can exploit this by choosing a specific validity_start_height, resulting in the sender being debited twice and the recipient credited twice. No public exploit code or CISA KEV listing has been identified; vendor patch 1.5.1 is available.
Unauthenticated SQL injection and remote code execution in Ash Framework (ash-project/ash) are achievable by any caller who can reach a keyset-paginated endpoint: the cursor deserializer accepts pre-interned Ash expression structs that bypass query filter guards, yielding SQL injection on AshPostgres deployments or in-process arbitrary code execution on ETS and Simple data layers. All ash versions 1.17.0 through 3.31.2 are exposed across both impact paths. No independently released exploit tooling is known at time of analysis, but the upstream fix commit contains a working proof-of-concept that reproduces the exact forged cursor technique, substantially shortening the path from disclosure to weaponization.
Denial of service in IBM i 7.3 through 7.6 allows an unauthenticated remote attacker to crash or render unavailable affected system services by sending input that bypasses server-side size validation. The root cause is CWE-770 (Allocation of Resources Without Limits or Throttling), and the CVSS vector AV:N/AC:L/PR:N/UI:N confirms exploitation requires no authentication, no special conditions, and no user interaction. IBM i systems typically host irreplaceable mission-critical business workloads in sectors such as banking and manufacturing, making availability disruption disproportionately impactful despite the absence of code execution; no public exploit or CISA KEV listing has been identified at time of analysis.